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Abstract 

In this paper we compare three different formalisms that can be used in the area of models 
for distributed, concurrent and mobile systems. In particular we analyze the relationships 
between a process calculus, the Fusion Calculus, graph transformations in the Synchro- 
nized Hyperedge Replacement with Hoare synchronization (HSHR) approach and logic 
programming. We present a translation from Fusion Calculus into HSHR (whereas Fusion 
Calculus uses Milner synchronization) and prove a correspondence between the reduction 
semantics of Fusion Calculus and HSHR transitions. We also present a mapping from 
HSHR into a transactional version of logic programming and prove that there is a full 
correspondence between the two formalisms. The resulting mapping from Fusion Calculus 
to logic programming is interesting since it shows the tight analogies between the two 
formalisms, in particular for handling name generation and mobility. The intermediate 
step in terms of HSHR is convenient since graph transformations allow for multiple, re- 
mote synchronizations, as required by Fusion Calculus semantics. To appear in Theory 
and Practice of Logic Programming (TPLP). 

KEYWORDS: Fusion Calculus, graph transformation, Synchronized Hyperedge Replace- 
ment, logic programming, mobility 



1 Introduction 

In this paper we compare different formalisms that can be used to specify and 
model systems which are distributed, concurrent and mobile, as those that are usu- 
ally found in the global computing area. 

Global computing is becoming very important because of the great development 
of networks which are deployed on huge areas, first of all Internet, but also other 
kinds of networks such as networks for wireless communications. In order to build 
and program these networks one needs to deal with issues such as reconfigurability, 
synchronization and transactions at a suitable level of abstraction. Thus powerful 
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formal models and tools are needed. Until now no model has been able to emerge 
as the standard one for this kind of systems, but there are a lot of approaches with 
different merits and drawbacks. 

An important approach is based on process calculi, like Milner's CCS and Hoare's 
CSP. These two calculi deal with communication and synchronization in a simple 
way, but they lack the concept of mobility. An important successor of CCS, the n- 
calculus (Milner et al. 1992), allows to study a wide range of mobility problems in 
a simple mathematical framework. We are mainly interested in the Fusion Calculus 
(Parrow and Victor 1998; Victor 1998; Gardner and Wischik 2000; Gardner and 
Wischik 2004), which is an evolution of 7r-calculus. The interesting aspect of this 
calculus is that it has been obtained by simplifying and making more symmetric 
the 7r-calculus. 

One of the known limitations of process-calculi when applied to distributed sys- 
tems is that they lack an intuitive representation because they are equipped with an 
interleaving semantics and they use the same constructions for representing both 
the agents and their configurations. An approach that solves this kind of problems is 
based on graph transformations (Ehrig et al. 1999). In this case the structure of the 
system is explicitly represented by a graph which offers both a clean mathematical 
semantics and a suggestive representation. In particular we represent computational 
entities such as processes or hosts with hyperedges (namely edges attached to any 
number of nodes) and channels between them with shared nodes. As far as the 
dynamic aspect is concerned, we use Synchronized Hyperedge Replacement with 
Hoare synchronization (HSHR) (Degano and Montanari 1987). This approach uses 
productions to specify the behaviour of single hyperedges, which are synchronized 
by exposing actions on nodes. Actions exposed by different hyperedges on the same 
node must be compatible. In the case of Hoare synchronization all the edges must 
expose the same action (in the CSP style). This approach has the advantage, w.r.t. 
other graphical frameworks such as Double Pushout (Ehrig et al. 1973) or Bigraphs 
(Jensen and Milner 2003), of allowing a distributed implementation since produc- 
tions have a local effect and synchronization can be performed using a distributed 
algorithm. 

We use the extension of HSHR with mobility (Hirsch et al. 2000; Hirsch and Mon- 
tanari 2001; Konig and Montanari 2001; Ferrari et al. 2001; Lanese 2002), that 
allows edges to expose node references together with actions, and nodes whose ref- 
erences are matched during synchronization are unified. 

For us HSHR is a good step in the direction of logic programming (Lloyd 1993). 
We consider logic programming as a formalism for modelling concurrent and dis- 
tributed systems. This is a non-standard view of logic programming (see Bruni et al. 
2001 for a presentation of our approach) which considers goals as processes whose 
evolution is defined by Horn clauses and whose interactions use variables as channels 
and are managed by the unification engine. In this framework we are not interested 
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only in refutations, but in any partial computation that rewrites a goal into another. 

In this paper we analyze the relationships between these three formalisms and we 
find tight analogies among them, like the same parallel composition operator and 
the use of unification for name mobility. However we also emphasize the differences 
between these models: 

• the Fusion Calculus is interleaving and relies on Milner synchronization (in 
the CCS style); 

• HSHR is inherently concurrent since many actions can be performed at the 
same time on different nodes and uses Hoare synchronization; 

• logic programming is concurrent, has a wide spectrum of possible controls 
which are based on the Hoare synchronization model, and also is equipped 
with a more complex data management. 

We will show a mapping from Fusion Calculus to HSHR and prove a correspondence 
theorem. Note that HSHR is a good intermediate step between Fusion Calculus and 
logic programming since in HSHR hyperedges can perform multiple actions at each 
step, and this allows to build chains of synchronizations. This additional power is 
needed to model Milner synchronization, which requires synchronous, atomic rout- 
ing capabilities. To simplify our treatment we consider only reduction semantics. 
The interleaving behaviour is imposed with an external condition on the allowed 
HSHR transitions. 

Finally we present the connections between HSHR and logic programming. Since 
the logic programming paradigm allows for many computational strategies and is 
equipped with powerful data structures, we need to constrain it in order to have 
a close correspondence with HSHR. We define to this end Synchronized Logic Pro- 
gramming (SLP), which is a transactional version of logic programming. The idea 
is that function symbols are pending constraints that must be satisfied before a 
transaction can commit, as for zero tokens in zero-safe nets (Bruni and Montanari 
2000). In the mapping from HSHR to SLP edges are translated into predicates, 
nodes into variables and parallel composition into AND composition. 

This translation was already presented in the MSc. thesis of the first author 
(Lanese 2002) and in Lanese and Montanari (2002). Fusion Calculus was mapped 
into SHR with Milner synchronization (a simpler task) in Lanese and Montanari 
(2004a) where Fusion LTS was considered instead of Fusion reduction semantics. 
The paper Lanese and Montanari (2002) also contains a mapping of Ambient cal- 
culus into HSHR. This result can be combined with the one here, thus obtaining 
a mapping of Ambient calculus into SLP. An extensive treatment of all the topics 
in this paper can also be found in the forthcoming Ph.D. thesis of the first author 
(Lanese 2006). 

Since logic programming is not only a theoretical framework, but also a well de- 
veloped programming style, the connections between Fusion, HSHR and logic pro- 
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gramming can be used for implementation purposes. SLP has been implemented 
in Lanese (2002) through meta-interpretation. Thus we can use translations from 
Fusion and HSHR to implement them. In particular, since implementations of logic 
programming are not distributed, this can be useful mainly for simulation purposes. 

In Section 2 we present the required background, in particular we introduce the 
Fusion Calculus (2.1), the algebraic representation of graphs and the HSHR (2.2), 
and logic programming (2.3). Section 3 is dedicated to the mapping from Fusion 
Calculus to HSHR. Section 4 analyzes the relationships between HSHR and logic 
programming, in particular we introduce SLP (4.1), we prove the correspondence 
between it and HSHR (4.2) and we give some hints on how to implement Fusion 
Calculus and HSHR using Prolog (4.3). In Section 5 we present some conclusions 
and traces for future work. Finally, proofs and technical lemmas are in Appendix A. 

2 Background 

Mathematical notation. We use Ta to denote the application of substitution a to T 
(where T can be a term or a set/vector of terms). We write substitutions as sets of pairs 
of the form t/x, denoting that variable x is replaced by term t. We also denote with <ti<72 
the composition of substitutions o\ and oi. We denote with a^ 1 (x) the set of elements 
mapped to i by u. We use — | to denote the operation that computes the number of 
elements in a set/vector. Given a function / we denote with dom(/) its domain, with Im(/) 
its image and with f\s the restriction of / to the new domain S. We use on functions and 
substitutions set theoretic operations (such as U) referring to their representation as sets 
of pairs. Similarly, we apply them to vectors, referring to the set of the elements in the 
vector. In particular, \ is set difference. Given a set S we denote with S* the set of strings 
on S. Also, given a vector v and an integer i, v[i] is the i-th element of v. Finally, a vector 
is given by listing its elements inside angle brackets { — ). 

2.1 The Fusion Calculus 

The Fusion Calculus (Parrow and Victor 1998; Victor 1998) is a calculus for mod- 
elling distributed and mobile systems which is based on the concepts of fusion and 
scope. It is an evolution of the 7r-calculus (Milner et al. 1992) and the interesting 
point is that it is obtained by simplifying the calculus. In fact the two action pre- 
fixes for input and output communication are symmetric, whereas in the 7r-calculus 
they are not, and there is just one binding operator called scope, whereas the n- 
calculus has two (restriction and input). As shown in Parrow and Victor (1998), 
the 7r-calculus is syntactically a subcalculus of the Fusion Calculus (the key point 
is that the input of 7r-calculus is obtained using input and scope) . In order to have 
these properties fusion actions have to be introduced. An asynchronous version of 
Fusion Calculus is described in Gardner and Wischik (2000), Gardner and Wischik 
(2004), where name fusions are handled explicitly as messages. Here we follow the 
approach by Parrow and Victor. 
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We now present in details the syntax and the reduction semantics of Fusion Cal- 
culus. In our work we deal with a subcalculus of the Fusion Calculus, which has no 
match and no mismatch operators, and has only guarded summation and recursion. 
All these restrictions are quite standard, apart from the one concerning the match 
operator, which is needed to have an expansion lemma. To extend our approach to 
deal with match we would need to extend SHR by allowing production applications 
to be tagged with a unique identifier. We leave this extension for future work. In 
our discussion we distinguish between sequential processes (which have a guarded 
summation as topmost operator) and general processes. 

We assume to have an infinite set AT of names ranged over by u, v, . . . , z and an 
infinite set of agent variables (disjoint w.r.t. the set of names) with meta-variable 
X. Names represent communication channels. We use <j) to denote an equivalence 
relation on TV, called fusion, which is represented in the syntax by a finite set of 
equalities. Function n((j)) returns all names which are fused, i.e. those contained in 
an equivalence class of 4> which is not a singleton. 

Definition 1 

The prefixes are defined by: 

a ::— ux (Input) 
ux (Output) 
4> (Fusion) 



Definition 2 

The agents are defined by: 

S : : = Yli a i-Pi (Guarded sum) 



P:: = (Inaction) 

S (Sequential Agent) 

-P1I-F2 (Composition) 

(x)P (Scope) 

recX.P (Recursion) 

X (Agent variable) 

The scope restriction operator is a binder for names, thus x is bound in (x)P. 
Similarly rec is a binder for agent variables. We will only consider agents which are 
closed w.r.t. both names and agent variables and where in rec X.P each occurrence 
of X in P is within a sequential agent (guarded recursion). We use recursion to de- 
fine infinite processes instead of other operators (e.g. replication) since it simplifies 
the mapping and since their expressive power is essentially the same. We use infix 
+ for binary sum (which thus is associative and commutative). 



Given an agent P, functions fn, bn and n compute the sets fh(-P), bn(P) and 
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n(P) of its free, bound and all names respectively. 

Processes are agents considered up to structural axioms defined as follows. 
Definition 3 (Structural congruence) 

The structural congruence = between agents is the least congruence satisfying the 
a-conversion law (both for names and for agent variables), the abelian monoid laws 
for composition (associativity, commutativity and as identity), the scope laws 
(x)0 = 0, (x)(y)P = (y)(x)P, the scope extrusion law P\(z)Q = (z)(P\Q) where 
z £ fn(P) and the recursion law recX.P = P{rec X.P/ X}. 

Note that fn is also well-defined on processes. 

In order to deal with fusions we need the following definition. 

Definition 4 (Substitutive effect) 

A substitutive effect of a fusion cf) is any idempotent substitution a : Af — > W having 
<j> as its kernel. In other words xa = ya iff x<j>y and a sends all members of each 
equivalence class of <fi to one representative in the class 1 . 

The reduction semantics for Fusion Calculus is the least relation satisfying the 
following rules. 

Definition 5 (Reduction semantics for Fusion Calculus) 

(z)(R\(- ■ ■ + ux.P)\(uy.Q + ...))- (z)(R\P\Q)a 
where |a?| = \y\ and er is a substitutive effect of {x = y} such that dom(er) C z. 

(z)(R\(-.. + J>.P))^(z)(R\P)o- 

where a is a substitutive effect of <p such that dom(cr) C z. 

P = P',P'^Q',Q' = Q 
P^Q 

2.2 Synchronized Hyperedge Replacement 

Synchronized Hyperedge Replacement (SHR) (Degano and Montanari 1987) is an 
approach to (hyper)graph transformations that defines global transitions using local 
productions. Productions define how a single (hyper)edge can be rewritten and the 
conditions that this rewriting imposes on adjacent nodes. Thus the global transition 
is obtained by applying in parallel different productions whose conditions are com- 
patible. What exactly compatible means depends on which synchronization model 
we use. In this work we will use the Hoare synchronization model (HSHR), which 
requires that all the edges connected to a node expose the same action on it. For a 
general definition of synchronization models see Lanese and Montanari (2004b). 
We use the extension of HSHR with mobility (Hirsch et al. 2000; Hirsch and Mon- 
tanari 2001; Konig and Montanari 2001; Ferrari et al. 2001; Lanese 2002), that 



1 Essentially a is a most general unifier of <f>, when it is considered as a set of equations. 
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allows edges to expose node references together with actions, and nodes whose ref- 
erences are matched during synchronization are unified. 

We will give a formal description of HSHR as labelled transition system, but first 
of all we need an algebraic representation for graphs. 

An edge is an atomic item with a label and with as many ordered tentacles as 
the rank rank(L) of its label L. A set of nodes, together with a set of such edges, 
forms a graph if each edge is connected, by its tentacles, to its attachment nodes. 
We will consider graphs up to isomorphisms that preserve 2 nodes, labels of edges, 
and connections between edges and nodes. 

Now, we present a definition of graphs as syntactic judgements, where nodes cor- 
respond to names and edges to basic terms of the form L(x\, . . . , x n ), where the Xi 
are arbitrary names and rank(L) = n. Also, nil represents the empty graph and | 
is the parallel composition of graphs (merging nodes with the same name). 

Definition 6 {Graphs as syntactic judgements) 

Let N be a fixed infinite set of names and LE a ranked alphabet of labels. A 
syntactic judgement (or simply a judgement) is of the form r h G where: 

1. r C J\f is the (finite) set of nodes in the graph. 

2. G is a term generated by the grammar 
G:: = L(x) \ Gi\G 2 \ nil 

where if is a vector of names and L is an edge label with rank(L) = \x\. 

We denote with n the function that given a graph G returns the set n(G) of all the 
names in G. We use the notation T, x to denote the set obtained by adding x to T, 
assuming x T. Similarly, we write Ti, T 2 to state that the resulting set of names 
is the disjoint union of Ti and T 2 . 

Definition 7 (Structural congruence and well-formed judgements) 
The structural congruence = on terms G obeys the following axioms: 

(AG1) (G 1 |G 2 )|G 3 = G 1 |(G 2 |G 3 ) 

(AG2) Gi|G 2 = G 2 |Gi 
(AG3) G\nil = G 

The well-formed judgements T h G over LE and Af are those where n(G) C T. 

Axioms (AG1),(AG2) and (AG3) define respectively the associativity, commuta- 
tivity and identity over nil for operation |. 

Well-formed judgements up to structural axioms are isomorphic to graphs up to 
isomorphisms. For a formal statement of the correspondence see Hirsch (2003). 
We will now present the steps of a SHR computation. 



2 In our approach nodes usually represent free names, and they are preserved by isomorphisms. 
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Definition 8 (SHR transition) 

Let Act be a set of actions. For each action a G Act, let ar(a) be its arity. 
A SHR transition is of the form: 

T h G — ^ $ h G' 

where T h G and $ h G' are well- formed judgements for graphs, A : T — > (Act xAf*) 
is a total function and 7r : T — > T is an idempotent substitution. Function A assigns 
to each node x the action a and the vector y of node references exposed on x by the 
transition. If A(x) = (a,y) then we define actA(a;) = a and ri\(x) = y. We require 
that ar(actA(x)) = nA(x)|, namely the arity of the action must equal the length of 
the vector. 
We define: 

• n(A) = {z\3x.z G nA(x)} 
set of exposed names; 

. r A = n(A) \ r 

set of fresh names that are exposed; 

• n(7r) = {x\3x' ^ x.xn = x'w} 
set of fused names. 

Substitution ir allows to merge nodes. Since it is idempotent, it maps every node into 
a standard representative of its equivalence class. We require that Vx G u(A).xtt — 
x, i.e. only references to representatives can be exposed. Furthermore we require 
$ D Ttt U Ta, namely nodes are never erased. Nodes in Tj nt — $ \ (r7r U Ta) are 
fresh internal nodes, silently created in the transition. We require that no isolate, 
internal nodes are created, namely Ti nt C n(G'). 

Note that the set of names $ of the resulting graph is fully determined by T, A, 
7r and G' thus we will have no need to write its definition explicitly in the inference 
rules. Notice also that we can write a SHR transition as: 

T h G — Tit, Ta, Tj nt h G' . 

We usually assume to have an action e G Act of arity to denote "no synchro- 
nization" . We may not write explicitly 7r if it is the identity, and some actions if 
they are (e, ()). Furthermore we use A e to denote the function that assigns (e, ()) 
to each node in T (note that the dependence on T is implicit). 

We derive SHR transitions from basic productions using a set of inference rules. 
Productions define the behaviour of single edges. 

Definition 9 (Production) 

A production is a SHR transition of the form: 

xi,...,x n \- L(x!, ...,x n ) ^> $ h G 
where all Xi, i — 1 . . . n are distinct. 

Productions are considered as schemas and so they are a-convertible w.r.t. names 
in {xi,...,x n }U$. 
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We will now present the set of inference rules for Hoare synchronization. The 
intuitive idea of Hoare synchronization is that all the edges connected to a node 
must expose the same action on that node. 

Definition 10 (Rules for Hoare synchronization) 

rhGi^$hG 2 r'hG; $' v- g' 2 (ru$)n (r u = 



(par) 



(merge) 



T,T' h GilG'j AuA ' ,7rU7r ') h G 2 |G 2 



A.7T 



rhGi — — -> $ h G2 Vx, y G r.xcr = ya A x 7^ y => a,ct\(x) = actA(y) 

Fa h G X G $' h G 2 CT/5 



where er : T — > T is an idempotent substitution and: 

(i) . p = mgu({(nA(x))o- = (nA(y))cr|a;(T = ya} U {rrcr = ycr|rE7r = j/7r}) where /0 

maps names to representatives in Fa whenever possible 

(ii) . Vz G r.A'(z(r) = (A(z))(T ( 

(iii) . tt' = p\ Ta 



(idle) r h G T h G 

, r h Gi — ^ $ h g 2 z^r fn(ru$uB) = 

( new ) r~rr — =n 

T,xhG 1 Au{( ^ )} ^ h G 2 

A transition is obtained by composing productions, which are first applied on 
disconnected edges, and then by connecting the edges by merging nodes. In par- 
ticular rule (par) deals with the composition of transitions which have disjoint sets 
of nodes and rule (merge) allows to merge nodes (note that a is a projection into 
representatives of equivalence classes). The side condition requires that we have the 
same action on merged nodes. Definition (i) introduces the most general unifier p 
of the union of two sets of equations: the first set identifies (the representatives of) 
the tuples associated to nodes merged by a, while the second set of equations is 
just the kernel of 7r. Thus p is the merge resulting from both 7r and a. Note that 
(ii) A is updated with these merges and that (iii) ir' is p restricted to the nodes 
of the graph which is the source of the transition. Rule (idle) guarantees that each 
edge can always make an explicit idle step. Rule (new) allows adding to the source 
graph an isolated node where arbitrary actions (with fresh names) are exposed. 

We write V ¥ (r h G $ h G') if T h G ^ $ h G' can be obtained from 
the productions in V using Hoare inference rules. 



We will now present an example of HSHR computation. 
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Fig. 2. Productions 
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Example 1 (Hirsch et al. 2000) 

We show now how to use HSHR to derive a 4 elements ring starting from a one 
element ring, and how we can then specify a reconfiguration that transforms the 
ring into the star graph in Figure 1. 
We use the following productions: 

x, y h C(x, y) (^-O^-O), Xj y> z h C (x, z)\C(z, y) 

x,y \- C (x, y) > x,y,w h S(y,w) 

that are graphically represented in Figure 2. Notice that A is represented by deco- 
rating every node x in the left hand with act a (a;) and ua(x). The first rule allows 
to create rings, in fact we can create all rings with computations like: 

x h C(x,x) ->■ x,y h C(x, y)|C(y, x) ->■ 

-> x,y,z h C(x,y)|C(2/,z)|C(z,x) -> 

->■ i,i/,z,»h C(x,y)|C(y,z)|C(z,w)|C(w,x) 

In order to perform the reconfiguration into a star we need rules with nontrivial 
actions, like the second one. This allows to do: 



x,y,z,v\- C(x,y)\C(y,z)\C(z,v)\C(v,x) 



(x,r,(w)),(y,r,{w)),( z , r A w ))'( v < r :( w )) 



— > x, y, z,v,wh S(x, w)\S(y, w)\S(z, w)\S(v, w) 

Note that if an edge C is rewritten into an edge S, then all the edges in the ring 
must use the same production, since they must synchronize via action r. They must 
agree also on nA(x) for every x, thus all the newly created nodes are merged. The 
whole transition is represented in Figure 3. 
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Fig. 3. Ring creation and reconfiguration to star 




It is easy to show that if we can derive a transition T, then we can also derive 
every transition obtainable from T by applying an injective renaming. 

Lemma 1 

Let V be a set of productions and a an injective substitution. 
V W (r h G ^> $ h G') iff: 

7> Ih (IV h Gct $a h GV) 

where A' (arc) = (A(x))a and ajoV = X7rer. 

Proof 

By rule induction. 

2.3 Logic programming 

In this paper we are not interested in logic computations as refutations of goals for 
problem solving or artificial intelligence, but we consider logic programming (Lloyd 
1993) as a goal rewriting mechanism. We can consider logic subgoals as concurrent 
communicating processes that evolve according to the rules defined by the clauses 
and that use unification as the fundamental interaction primitive. A presentation 
of this kind of use of logic programming can be found in Bruni et al. (2001). 

In order to stress the similarities between logic programming and process calculi 
we present a semantics of logic programming based on a labelled transition system. 

Definition 11 

We have for clauses (C) and goals (G) the following grammar: 

G::-,4^G 
G : : = G,G \ A | □ 

where A is a logic atom, "," is the AND conjunction and □ is the empty goal. 
We can assume "," to be associative and commutative and with unit □. 

The informal semantics of A <— B\ , . . . , B n is "for every assignment of the vari- 
ables, if B\, . . . , B n are all true, then A is true" . 

A logic program is a set of clauses. Derivations in logic programming are called 
SLD-derivations (from "Linear resolution for Definite clauses with Selection func- 
tion"). We will also consider partial SLD-derivations. 



12 



Ivan Lanese and Ugo Montanari 



Definition 12 (Partial SLD- derivation) 
Let P be a logic program. 

We define a step of a SLD-resolution computation using the following rules: 

H <— Bi,. . . ,Bk 6 -P = mgn({A = Hp}) . 
— — atomic goal 

P \\- A —> (Si, . . . , B k )p9 
where p is an injective renaming of variables such that all the variables in the clause 
variant (H <— B\, . . . , B\~)p are fresh. 

PWG^F 
conjunctive goal 

P W G, G' ^ F, G'O 
We will omit P lh if P is clear from the context. 

A partial SLD-derivation of P U {G} is a sequence (possibly empty) of steps of 
SLD-resolution allowed by program P with initial goal G. 



3 Mapping Fusion Calculus into Synchronized Hyperedge Replacement 

In this section we present a mapping from Fusion Calculus to HSHR. 
This mapping is quite complex since there are many differences between the two 
formalisms. First of all we need to bridge the gap between a process calculus and a 
graph transformation formalism, and this is done by associating edges to sequen- 
tial processes and by connecting them according to the structure of the system. 
Moreover we need to map Milner synchronization, which is used in Fusion Cal- 
culus, into Hoare synchronization. In order to do this we define some connection 
structures that we call amoeboids which implement Milner synchronization using 
Hoare connectors. Since Hoare synchronization involves all the edges attached to a 
node while Milner one involves just pairs of connectors, we use amoeboids to force 
each node to be shared by exactly two edges (one if the node is an interface to the 
outside) since in that case the behaviour of Hoare and Milner synchronization is 
similar. An amoeboid is essentially a router (with no path-selection abilities) that 
connects an action with the corresponding coaction. This is possible since in HSHR 
an edge can do many synchronizations on different nodes at the same time. Finally, 
some restrictions have to be imposed on HSHR in order to have an interleaving 
behaviour as required by Fusion Calculus. 

We define the translation on processes in the form (x)P where P is the parallel 
composition of sequential processes. Notice that every process can be reduced to 
the above form by applying the structural axioms: recursive definitions which are 
not inside a sequential agent have to be unfolded once and scope operators which 
are not inside a sequential agent must be taken to the outside. We define the trans- 
lation also in the case (x)P is not closed w.r.t. names (but it must be closed w.r.t. 
process variables) since this case is needed for defining productions. 

In the form (x)P we assume that the ordering of names in (x) is fixed, dictated 
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by some structural condition on their occurrences in P. 

For our purposes, it is also convenient to express process P in (x)P as P = P'a, 
where P' is a linear agent, i.e. every name in it appears once. We assume that 
the free names of P' are fresh, namely fh(P') n fn(P) = 0, and again structurally 
ordered. The corresponding vector is called fnarray(P'). 

The decomposition P = P'a highlights the role of amoeboids. In fact, in the 
translation, substitution a is made concrete by a graph consisting of amoeboids, 
which implement a router for every name in fn(P). More precisely, we assume the 
existence of edge labels rrii and n of ranks i = 2,3,... and 1 respectively. Edges 
labelled by m, implement routers among i nodes, while n edges "close" restricted 
names x in (x)P'a. 

Finally, linear sequential processes S in P' must also be given a standard form. 
In fact, they will be modelled in the HSHR translation by edges labelled by Ls, 
namely by a label encapsulating S itself. However in the derivatives of a recursive 
process the same sequential process can appear with different names an unbound 
number of times. To make the number of labels (and also of productions, as we will 
see in short) finite, for every given process, we choose standard names x\, . . . ,x n 
and order them structurally: 

S = S(x 1} . . . , x n )p s with Si = S 2 p implying Si = S 2 and p Sl = pp S2 . 

We can now define the translation from Fusion Calculus to HSHR. The transla- 
tion is parametrized by the nodes in the vectors v and w we choose to represent 
the names in x and fnarray(P'). We denote with \ xeS G x the parallel composition 
of graphs G x for each ieS. 

Definition 13 {Translation from Fusion Calculus to HSHR) 

l(x)P'ah^ = r h iP'Uw/ fnarray(P')}|H{«/x}{u;/fnarray(P')}| \ x ^n{x) 

where: 

\v\ = |x|, 

\w\ = I fnarray(P')|, 

v n w = 

and with: 

r = fn((x)P'a),v,w. 
[0] = nil 

[S] = L s (xi, . . .,x n )p s with n = | in(S)\ 
[Pi|P 2 ] = [Pill [ft] 

M = Leim(<r) mk+iix^- 1 ^)) where k = ^(x)]. 

In the above translation, graph [P'J consists of a set of disconnected edges, one 
for each sequential process of (x)P'a. The translation produces a graph with three 
kinds of nodes. The nodes of the first kind are those in w. Each of them is adjacent 
to exactly two edges, one representing a sequential process of P', and the other an 
amoeboid. Also the nodes in v are adjacent to two edges, an amoeboid and an n 
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Fig. 4. Amocboids for a 
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edge. Finally the nodes in fn((x) P'a) are adjacent only to an amoeboid. 

As mentioned above, translation \a\ builds an amoeboid for every free name x 
of P'a: it has k + 1 tentacles, where k are the occurrences of x in P'a, namely the 
free names of P' mapped to it. Notice that the choice of the order within a^ 1 (x) is 
immaterial, since we will see that amoeboids are commutative w.r.t. their tentacles. 
However, to make the translation deterministic, a^ 1 (x) could be ordered according 
to some fixed precedence of the names. 

Example 2 ( Translation of a substitution) 

Let a — {y/x, y/z, r/w}. The translation of a is in Figure 4. 

Example 3 ( Translation of a process) 

Let us consider the (closed) process (uz)uz.0\ recX.(x)ux.(ux.O\X). We can write 

it in the form (x)P as: 

(uzy)uz.0\uy.(uy.0\ rec X.(x)ux.(ux.0\X)) 

Furthermore we can decompose P into P'a where: 

P' = uTzi.0|ti22/i.(it3j/2-0| rec X.(x)u4X.(uEx.0\X)) 

a = {u/ui,z/zi,u/u 2 ,y/yi,u/u 3 ,y/y2,u/u4,u/u 5 }. 

We can now perform the translation. 

We choose v — (u, z, y) and w = (u\, Zi, M2, J/i, u 3> V2, «4, U5): 
l(x)P'a\y^ = u, z,y,ui, zi,U2,yi,u 3 ,y 2 ,U4,u 5 h 

LxTx 2 .o{ui, Zl)\L XlX2 .(^ Xi \ r CC X.(x)x 5 x.(x£x.0\X))( u 2,yi,U 3} y 2 , U4, U 5 )| 

m 6 (u, ui,u 2 , us, U4, u 5 )\m 2 (z, zi)\m 3 (y, j/i, y 2 )\n(u)\n(z)\n(y) 

Now we define the productions used in the HSHR system. 
We have two kinds of productions: auxiliary productions that are applied to amoe- 
boid edges and process productions that are applied to process edges. 
Before showing process productions we need to present the translation from Fusion 
Calculus prefixes into HSHR transition labels. 

Definition 14 

The translation from Fusion Calculus prefixes into HSHR transition labels is the 

following: 

[a] = (A, 7r) where 

if a = ux then A(u) = (in n , x), A(x) = (e, (}) if x ^ u with n = \x\, it = id 
if a = ux then A(u) = (out n ,x), A(x) = (e, ()) if x ^ u and n — \x\, ir = id 
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if a = <f> then A = A e and ir is any substitutive effect of (f>. 

We will write \ux\ and fuxj as (u, in n ,x) and (u,out n ,x) respectively. 

Definition 15 (Process productions) 

We have a process production for each prefix at the top level of a linear standard 
sequential process (which has {x\, . . . ,x n } as free names). Let J2i a i-Pi be such a 
process. Its productions can be derived with the following inference rule: 

x 1 ,...,x n \-L i:tat .p i (x 1 ,...,x n )^l T,F h GIKUMI \ xer „ n(x) 

if v U w, {xi, . . . ,x n } and fn(Pj)£ are pairwise disjoint with £ injective renaming 
from hi(Pj) to fresh names, V = x u ...,x n and T" = Y'\ (n(A) U n(?r) U fn(P,)). 

We add some explanations on the derivable productions. Essentially, if ctj.Pj is 
a possible choice, the edge labelled by the process can have a transition labelled 
by Idj} to something related to [[P/]^. We use Pj£ instead of Pj (and then wc 
add the translation of £) to preserve the parity of the number of amoeboid edges 
on each path (see Definition 17). The parameter v of the translation contains fresh 
nodes for restricted names that are taken to the top level during the normalization 
of Pj while w contains the free names in the normalization of Pj (note that some of 
them may be duplicated w.r.t. Pj, if this one contains recursion). If ctj is a fusion 
(j>, according to the semantics of the calculus, a substitutive effect it of it should 
be applied to Pj, and this is obtained by adding the amoeboids [77] in parallel. 
Furthermore, T h G must be enriched in other two ways: since nodes can never 
be erased, nodes which are present in the sequential process, i.e. the nodes in r", 
must be added to T. Also "close" n edges must be associated to forgotten nodes 
(to forbid further transitions on them and to have them connected to exactly two 
edges in the result of the transition), provided they are not exposed, i.e. to nodes 
in T". 

Note that when translating the RHS (x)Pa of productions we may have names 
in Pa which occur just once. Since they are renamed by a and £, they will produce 
in the translation some chains of 11J2 connectors of even length, which, as we will see 
shortly, are behaviourally equivalent to simple nodes. For simplicity, in the examples 
we will use the equivalent productions where these connectors have been removed 
and the nodes connected by them have been merged. 

Example 4 ( Translation of a production) 

Let us consider firstly the simple agent aTfa^.O. 

The only production for this agent (where v = w = ()) is: 

I t ( \ (xi,Olitl,(x2» I 1 \ 

£1,0:2 I- L WIX2 , [x 1 ,x 2 ) > 0:1,0:2 r n{xi) 

where we closed node x\ but not node x-i since the second one is exposed on x\. 
Let us consider a more complex example: 
x\X2-{x^x^SS\ recX.(x)x 5 x.(x^x.0\X)). 

The process xsX4- 0| recX.(x)x5X.(xQX.0\X)^ where Xi£ — x\ can be transformed 
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into: 

(y)yTy2-0\y3y4-(yEye-0\ recX.((x)y 7 x.(yix.O\X)))a 

where a = {x 3 /y 1 ,x' 4 /y 2 ,x' 5 /y 3 ,y/y 4: ,x' 6 /y 5 ,y/y e ,x' 5 /y 7 ,xyys}. 

Its translation (with v= (y) and w = (2/1,2/2,2/3,2/4,2/5,2/6,2/7,2/8)) is: 

x 3 , x 4 , x' 5 ,x' 6 , 2/1,2/2, 2/3, 2/4, 2/5, 2/6, 2/7, 2/8, 2/ ^ 

ixTx 2 .o(2/l) V2)\L XlX2 . (x?x 4 .0| recX.((x)x 5 x.(x£x.0|X)))(2/3, 2/4, 2/5,2/6, 2/7, 2/8)1 

m2(4>yi)l TO 2(4:y2)|m 3 (x5,2/3,2/7)|w3(4>2/5,2/8)|TO3(2/,y4,2/6)|"(2/) 

Thus the production is: 

Xl,X2,X3,Xi, X 5 , X 6 h ixix 2 .(x?x 4 .0| roc X.(x)x 5 x.(x?x.0|X)) (#1 , x 2, «3, #4, #5, X 6 ) 

(xi,mi,(x2>) 

xi, x 2 , x 3 , x 4 , x 5 ,x 6 ,y 3 , j/4, 2/5, 2/6, 2/7, 2/8, 2/, 4: 4 ^ 
-^xTx 2 .0 (x 3 ,x 4 )|L 

a;ia:2-(^3^4-0| rcc X.((x)xqx. (xex.0\X)))(V3, 2/4, 2/5, 2/6, 2/7, 2/8 ) | 

«3 (4 ,2/3 , 2/7) I "i3 {x' 6 , 2/5 , 2/8 ) I m 3 (y, y 4 , y 6 ) | n(t/) | m 2 {x 5 , Xg ) | m 2 (x 6 , x 6 ) | n (xi ) 

where for simplicity we collapsed 2/1 with x 3 and y 2 with X4. 

We will now show the productions for amoeboids. 

Definition 16 {Auxiliary productions) 

We have auxiliary productions of the form: 

^ i_ /tin (xi,inn,m),{x2,out n ,m) _ _ , /t-in 1 t /^ r-i - m\ 

T r- m fe (r) > r, 2/1, 2/2 I" m fe (r)| l^...^, m 2 {yi[i\,y 2 [i\) 

We need such a production for each fc and n and each pair of nodes xi and x 2 in Y 
where T is a chosen tuple of distinct names with k components and y\ and y 2 are 
two vectors of fresh names such that |?7i| = I2/2I =n. 

Note that we also have the analogous production where xi and x 2 are swapped. In 
particular, the set of productions for a mu edge is invariant w.r.t. permutations of 
the tentacles, modelling the fact that its tentacles are essentially unordered. 
We have no productions for edges labelled with n, which thus forbid any synchro- 
nization. 

The notion of amoeboid introduced previously is not sufficient for our purposes. 
In fact, existing amoeboids can be connected using m 2 edges and nodes that are no 
more used can be closed using n edges. Thus we present a more general definition 
of amoeboid for a set of nodes and we show that, in the situations of interest, these 
amoeboids behave exactly as the simpler irii edges. 

Definition 17 (Structured amoeboid) 

Given a vector of nodes s, a structured amoeboid M(s) for the set of nodes S 
containing all the nodes in s is any connected graph composed by m and n edges 
that satisfies the following properties: 

• its set of nodes is of the form SU I, with S fl / = 0; 

• nodes in S are connected to exactly one edge of the amoeboid; 
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• nodes in / are connected to exactly two edges of the amoeboid; 

• the number of edges composing each path connecting two distinct nodes of S 
is odd. 

Nodes in S are called external, nodes in / are called internal. We consider equiv- 
alent all the amoeboids with the same set S of external nodes. The last condition 
is required since each connector inverts the polarity of the synchronization, and we 
want amoeboids to invert it. 
Note that m\s\(s) is an amoeboid for S. 

Lemma 2 

If M(s) is a structured amoeboid for S, the transitions for M(s) which are non idle 
and expose non e actions on at most two nodes x\, x 2 <E S are of the form: 

S ,I h M(s) ±2* S,I,l',y u y 2 h M(s)\ \ i=1 ^ Wil Mfa®, y 2 ]i))\ \ M(0) 

where A(xi) = (in n , yi) and A(x 2 ) = {out n , y 2 ) (non trivial actions may be exposed 
also on some internal nodes) and yi and y 2 are two vectors of fresh names such 
that \y\\ = 1 2/2 1 = n. Here M(0) contains rings of m 2 connectors connected only to 
fresh nodes which thus are disconnected from the rest of the graph. We call them 
pseudoamoeboids. Furthermore we have at least one transition of this kind for each 
choice of x\, x 2 , yi and y 2 . 

Proof 

See Appendix A. 

Thanks to the above result we will refer to structured amoeboids simply as amoe- 
boids. 

We can now present the results on the correctness and completeness of our trans- 
lation. 

Theorem 1 {Correctness) 

For each closed fusion process P and each pair of vectors v and w satisfying the 
constraints of Definition 13, if P —> P' then there exist A, T and G such that 
{Ph,w r h G. Furthermore T h G is equal to p"]^*, (for some v' and w') 

up to isolated nodes, up to injective renamings, up to equivalence of amoeboids 
(r h G can have a structured amoeboid where [P'J has a simple one) and up 
to pseudoamoeboids. 

Proof 

The proof is by rule induction on the reduction semantics. 
See Appendix A. 
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Theorem 2 [Completeness) 

For each closed fusion process P and each pair of vectors v and w if [P]]^™ T h 
G with a HSHR transition that uses exactly two productions for communication 
or one production for a fusion action (plus any number of auxiliary productions) 
then P — > P' and r h G is equal to [P']^/ - ; (for some v' and w') up to isolate 
nodes, up to injective renamings, up to equivalence of amoeboids (r h G can have a 
structured amoeboid where fP'ij has a simple one) and up to pseudoamoeboids. 

Proof 

See Appendix A. 

These two theorems prove that the allowed transitions in the HSHR setting cor- 
respond to reductions in the Fusion Calculus setting. Note that in HSHR we must 
consider only transitions where we have either two productions for communication 
or one production for a fusion action. This is necessary to model the interleaving 
behaviour of Fusion Calculus within the HSHR formalism, which is concurrent. On 
the contrary, one can consider the fusion equivalent of all the HSHR transitions: 
these correspond to concurrent executions of many fusion reductions. One can give 
a semantics for Fusion Calculus with that behaviour. Anyway in that case the no- 
tion of equivalence of amoeboids is no more valid, since different amoeboids allow 
different degrees of concurrency. We thus need to constrain them. The simplest case 
is to have only simple amoeboids, that is to have no concurrency inside a single 
channel, but there is no way to force normalization of amoeboids to happen before 
undesired transitions can occur. The opposite case (all the processes can interact 
in pairs, also on the same channel) can be realized, but it requires more complex 
auxiliary productions. 

Note that the differences between the final graph of a transition and the trans- 
lation of the final process of a Fusion Calculus reduction are not important, since 
the two graphs have essentially the same behaviours (see Lemma 1 for the effect 
of an injective renaming and Lemma 2 for the characterization of the behaviour of 
a complex amoeboid; isolated nodes and pseudoamoeboids are not relevant since 
different connected components evolve independently). Thus the previous results 
can be extended from transitions to whole computations. 

Note that in the HSHR model the behavioural part of the system is represented 
by productions while the topological part is represented by graphs. Thus we have 
a convenient separation between the two different aspects. 

Example 5 ( Translation of a transition) 

We will now show an example of the translation. Let us consider the process: 
(uxyzw)(Q(x, y, z)\uxy.R{u, x)\uzw.S(z, w)) 
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Note that it is already in the form (x)P . It can do the following transition: 

(uxyzw)(Q(x, y, z)\uxy.R(u, x)\uzw.S(z, wj) — > 

(uxy)(Q(x, y, z)\R(u, x)\S(z, w)){x/z, y/w} 

We can write P in the form: 

(Q(a;i,yi, zi)\uiX2y2-R(u2, X3)\u3Z2Wi.S(z3, W2))<J 

where: 

cr = {x/x!,y/yi, z/z\, u/u 1 ,x/x 2 ,y/y2,u/u 2 , x/x 3 ,u/u 3 , z/z 2 , w/w 1 ,z/z 3 , w/w 2 }. 
A translation of the starting process is: 

U,X,y,W,Z,X 1 ,y 1 ,Z 1 ,U 1 ,X2,y2,U2,X3,U3,Z 2 ,W 1 ,Z3,W2 r- 

(ui,X2,y2,U 2 ,X 3 )\ 
L XlX2X3 .S(x i ,x 5 )(u3,Z2,W 1 ,Z 3 ,W2)\m 4 (u,U 1 ,U2,U 3 )\m4(x,X 1 ,X2,X 3 )\ 

m 3 (y,yi,y 2 )\m4(z,zi,Z2, z 3 )\m 3 (w,wi,W2)\n(u)\n(x)\n(y)\n(w)\n(z) 

A graphical representation is in Figure 5. 
We have the following process productions: 



J/1,2/2,3/3,2/4,2/5 I - L xIX2X3M(x4 , X5) {y 1 ,y2,y 3l y4,y5) 



(yi,out 2 ,{y2,V3)) 



2/1,2/2,2/3,2/4,2/5 I- ii?(x 1 ,x 2 )(2/4,2/5)|«(2/l) 

2/1,2/2,2/3,2/4,2/5 r ^xiX2x 3 .S(x4,x 6 ) (2/1, 2/2, 2/3,2/4,2/5] > 

2/1,2/2,2/3,2/4,2/5 I- £s(xi,x 2 )(2/4,2/5)M2/l) 
In order to apply (suitable variants of) these two productions concurrently we have 
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to synchronize their actions. This can be done since in the actual transition actions 
are exposed on nodes u\ and u 3 respectively, which are connected to the same rrn 
edge. Thus the synchronization can be performed (see Figure 6) and we obtain as 
final graph: 

U,X,y,W,Z,Xi,yi,Zi,U 1 ,X2,y2,U2,X3,U 3 ,Z2,Wi,Z 3 ,W2 r- 

L Q(x u x 2 ,x 3 )(xi,yi, Zl)\ (z 3 ,w 2 )\n(u 3 )\ 

m 4 (u, ui,u 2 ,it3) \m,i(x,xi,x 2 ,x 3 ) \m 3 (y, yi,y 2 ) \m i (z,z ll z 2l z 3 )\m 3 (w,wi,w 2 ) \ 

m 2 (x 2 ,z 2 )\m 2 (y 2 ,wi)\n(u)\n(x)\n(y)\n(w)\n(z) 

which is represented in Figure 7. 

The amoeboids connect the following tuples of nodes: 

(u,ui,u 2 ,u 3 ), (x,x 1 ,x 2 ,x 3 ,z 2 ,z,z 1 ,z 3 ), (w,w 1 ,w 2 ,y 2 ,y,yi)- Thus, if we connect 
these sets of nodes with simple amoeboids instead of with complex ones, we have up 
to injective renamings a translation of (uxy)Q(x,y,x)\R(u,x)\S(x,y) as required. 



Example 6 ( Translation of a transition with recursion) 

We will show here an example that uses recursion. Let us consider the closed process 
(uz)uz\ iecX.(x)ux.(ux.0\X). The translation of this process, as shown in Example 
3 is: 

u, z, y, ui, zi,u 2 ,yi,u 3 , j/2, u 4 , u 5 h 

LxT X2 .o{ui, Zi)\L XlX2 ^ Xl Q \ rccX.(x)x 5 x.(x£x.0\X))( u 2,yi,U3, 2/2 , "4, t*5)| 

m 6 (u, ui,u 2 , u 3 , u 4 , u 5 )\m 2 (z, z±)\m 3 {y, yi, y 2 )\n{u)\n(z)\n(y) 

We need the productions for two sequential edges (for the first step): arfa^.O and 
x \x 2 . (3^3x4.0 1 r:QcX.(x)x^x.^ix%SS\Xy). 



Mapping Fusion and SHR into Logic Programming 21 



Fig. 7. Resulting graph 
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The productions are the ones of Example 4 (we write them here in a suitable a- 
converted form): 

Ui,Z\ V- 1^-^.0(^1,-21) * Ui,Z! h n(ui) 

"2, J/1, «3, J/2, «4, «5 h £xix 2 .(x?x 4 .0| rec X.(x)x B x.(xjx.O\X)) ( M 2, J/1, W3, J/2, U4, M5) 

U2,ini,(yi) ^ 

U2, J/1, «3, J/2, U4, "5, Wl, W2, W3, W4, W5, «>6, J/', U 4 , U5 h 
^— 2:2.0 ("3, J/2)|ixix 2 .(K?X4.0|recX.((x)x 5 x.(x?x.0|X)))(w ; l, W 2 , W3, ^4, W 5 , W 6 )| 

m 3 (u' 4 , wi, w 5 )\m 3 (u' 5l w 3 , w 6 )\m 3 (y' , w 2 , W4)\n(y')\m 2 (u 4 ,u 4 )\m 2 (u 5l u' 5 )\n(u 2 ) 

By using these two productions and a production for me (the other edges stay idle) 
we have the following transition: 

u,z,y,ui,zi,U2,yi,U3,y 2 ,U4,u 5 h 

L~x~[X2-0 (^1 : ^l) \Lx1X2 .(XJX4.O rcc X.(x)xsx.(x6"x. 0|X))(«2, 2/1, «3, J/2,«4,«5)| 

m 6 (M,ui,U2,«3,U4,«5)|ni2(-z, zi)\m 3 (y,yi, y 2 )\n(u)\n(z)\n(y) 

(tii, out i,(zi))(u2, ini, (yi)) 

u,y, z,x,ui,z 1 ,u 2 ,yi,u 3 ,y 2 ,U4,u 5 , wi, w 2 ,w 3 ,W4, w 5 ,w 6 , y',u' 4 ,u' 5 h 
n(ui)|LxTx 2 .o(M3, J/2)| )x 5 x.(x^x.0|X)))(wi, U>2, U>3, W4, 105, 106 )| 

m 3 (u4, Wi, W 5 )|™ 3 (U5, W 3 ,W 6 )|m 3 (y^ W2,W4)|n(j/0l™2(M4,U 4 )l TO 2(M5,W5)l n ( li 2) 

m 6 (u, ui, U2, U3, «4, u 5 )\m 2 (zi,yi)\m 2 (z, z\)\m 3 (y, j/i, y 2 )|n(u)|n(z)|n(y) 
The resulting graph is, up to injective renaming and equivalence of amoeboids, a 
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translation of: 

(uyy')(uy.O\uy'.(uy'.0\ recX.(x)ux.(ux.O\X))) 
as required. 

We end this section with a simple schema on the correspondence between the 
two models. 



Fusion HSHR Fusion HSHR 



Closed process 
Sequential process 
Prefix execution 



Graph 
Edge 

Production 



Reduction 

Name 





Transition 
Amoeboid 
Nil 



As shown in the table, we represent (closed) processes by graphs where edges 
are sequential processes and amoeboids model names. The inactive process is the 
empty graph nil. From a dynamic point of view, Fusion reductions are modelled by 
HSHR transitions obtained composing productions that represent prefix executions. 

4 Mapping Hoare SHR into logic programming 

We will now present a mapping from HSHR into a subset of logic programming 
called Synchronized Logic Programming (SLP). The idea is to compose this map- 
ping with the previous one obtaining a mapping from Fusion Calculus into logic 
programming. 

4-1 Synchronized Logic Programming 

In this subsection we present Synchronized Logic Programming. 
SLP has been introduced because logic programming allows for many execution 
strategies and for complex interactions. Essentially SLP is obtained from standard 
logic programming by adding a mechanism of transactions. The approach is similar 
to the zero-safe nets approach (Bruni and Montanari 2000) for Petri nets. In partic- 
ular we consider that function symbols are resources that can be used only inside a 
transaction. A transaction can thus end only when the goal contains just predicates 
and variables. During a transaction, which is called big-step in this setting, each 
atom can be rewritten at most once. If a transaction can not be terminated, then 
the computation is not allowed. A computation is thus a sequence of big-steps. 
This synchronized flavour of logic programming corresponds to HSHR since: 

• used goals correspond to graphs (goal-graphs); 

• clauses in programs correspond to HSHR productions (synchronized clauses); 

• resulting computations model HSHR computations (synchronized computa- 
tions). 

Definition 18 (Goal-graph) 

We call goal-graph a goal which has no function symbols (constants are considered 
as functions of arity 0). 
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Definition 19 {Synchronized program) 

A synchronized program is a finite set of synchronized rules, i.e. definite program 
clauses such that: 

• the body of each rule is a goal-graph; 

• the head of each rule is A(t\, . . . ,t n ) where tj is either a variable or a single 
function (of arity at least 1) symbol applied to variables. If it is a variable 
then it also appears in the body of the clause. 

Example 7 

q{f{x),y) <— p(x,y) synchronized rule; 
q{f{x), y) <— p(x, f(y)) not synchronized since p(x, f(y)) is not a goal-graph; 
q(g(f(x)),y) <— p(x,y) not synchronized since it contains nested functions; 
q(f(x),y,f(z)) <— p(x) not synchronized since y is an argument of the head 

predicate but it does not appear in the body; 

q(f(x),f(z)) <— p(x) synchronized, even if z does not appear in the body. 

In the mapping, the transaction mechanism is used to model the synchronization 
of HSHR, where edges can be rewritten only if the synchronization constraints 
are satisfied. In particular, a clause A(t\, . . . ,t n ) <— B\,...,B n will represent a 
production where the head predicate A is the label of the edge in the left hand side, 
and the body B\ , . . . , B n is the graph in the right hand side. Term t i in the head 
represents the action occurring in Xi, if A(x\, . . . ,x n ) is the edge matched by the 
production. Intuitively, the first condition of Definition 19 says that the result of a 
local rewriting must be a goal-graph. The second condition forbids synchronizations 
with structured actions, which are not allowed in HSHR (this would correspond to 
allow an action in a production to synchronize with a sequence of actions from 
a computation of an adjacent subgraph). Furthermore it imposes that we cannot 
disconnect from a node without synchronizing on it . 

Now we will define the subset of computations we are interested in. 

Definition 20 (Synchronized Logic Programming) 
Given a synchronized program P we write: 

q' * 

iff G\ — ► G2 and all steps performed in the computation expand different atoms 

of Gi, 0'| n (Gi) — ^ an d both Gi and G2 are goal-graphs. 

We call Gi 4- G2 a big-step and all the — ► steps in a big-step small-steps. 

A SLP computation is: 

Gi G2 i.e. a sequence of or more big-steps. 



This condition has only the technical meaning of making impossible some rewritings in which 
an incorrect transition may not be forbidden because its only effect is on the discarded variable. 
Luckily, we can impose this condition without altering the power of the formalism, because we 
can always perform a special foo action on the node we disconnect from and make sure that all 
the other edges can freely do the same action. For example we can rewrite q(f(x), y, f(z)) «— p(x) 
as q(f(x), foo(y), f(z)) <— p(x), which is an allowed synchronized rule. An explicit translation 
of action e can be used too. 
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4-2 The mapping 

We want to use SLP to model HSHR systems. As a first step we need to trans- 
late graphs, i.e. syntactic judgements, to goals. In this translation, edge labels are 
mapped into SLP predicates. Goals corresponding to graphs will have no func- 
tion symbols. However function symbols will be used to represent actions. In the 
translation we will lose the context T. 

Definition 21 { Translation for syntactic judgements) 
We define the translation operator [— ] as: 

[r h L(xx, . . .,x n )j = L(xi, . . .,x n ) 
[ThGilGa] = [r h G,l IT h G 2 ] 
[r h nil} = □ 

Sometimes we will omit the T part of the syntactic judgement. We can do this 
because it does not influence the translation. For simplicity, we suppose that the 
set of nodes in the SHR model coincides with the set of variables in SLP (otherwise 
we need a bijective translation function). We do the same for edge labels and names 
of predicates, and for actions and function symbols. 

Definition 22 

Let F h G and V h G' be graphs. We define the equivalence relation = in the 
following way: r h G * F' h G' iff G = G'. 

Observe that if two judgements are equivalent then they can be written as: 

I*\ r unused ^~ G 

V V \- c 

L ' L unused 1 < ~ r 

where F = n(G). 

Theorem 3 {Correspondence of judgements and goal-graphs) 

The operator [— ] defines an isomorphism between judgements (defined up to =) 
and goal-graphs. 

Proof 

The proof is straightforward observing that the operator [— ] defines a bijection 
between representatives of syntactic judgements and representatives of goal-graphs 
and the congruence on the two structures is essentially the same. □ 

We now define the translation from HSHR productions to definite clauses. 

Definition 23 { Translation from productions to clauses) 
We define the translation operator [— ] as: 

{L(xi, . . .,x n ) G\ = L{a 1 {x 1 n,y 1 ), . . . , a n (x n ir, y n )) <- [G] 

if A{xi) — {ai,{/i) for each i e {1, . . . , n} and if ^ e. If = e we write simply 
Xiir instead of e{xiTr). 
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The idea of the translation is that the condition given by an action (x, a, y) is 
represented by using the term a(xn, y) as argument in the position that corresponds 
to x. Notice that in this term a is a function symbol and 7r is a substitution. During 
unification, x will be bound to that term and, when other instances of x are met, the 
corresponding term must contain the same function symbol (as required by Hoarc 
synchronization) in order to be unifiable. Furthermore the corresponding tuples of 
transmitted nodes are unified. Since x will disappear we need another variable to 
represent the node that corresponds to x. We use the first argument of a to this 
purpose. If two nodes are merged by it then their successors are the same as required. 

Observe that we do not need to translate all the possible variants of the rules 
since variants with fresh variables are automatically built when the clauses are ap- 
plied. Notice also that the clauses we obtain are synchronized clauses. 

The observable substitution contains information on A and n. Thus given a transi- 
tion we can associate to it a substitution 9. We have different choices for 9 according 
to where we map variables. In fact in HSHR nodes are mapped to their represen- 
tatives according to n, while, in SLP, 9 cannot do the same, since the variables of 
the clause variant must be all fresh. The possible choices of fresh names for the 
variables change by an injective renaming the result of the big-step. 

Definition 24 (Substitution associated to a transition) 

Let r h G $ h G' be a transition. We say that the substitution 9 p associated 
to this transition is: 

P = {(a(xirp,yp)/x\A(x) = (a,y),a^ e} U {xn p / x}\K(x) = (e, ())} 
for some injective renaming p. 

We will now prove the correctness and the completeness of our translation. 

Theorem 4 (Correctness) 

Let V be a set of productions of a HSHR system as defined in definitions 9 and 10. 
Let P be the logic program obtained by translating the productions in V according 
to Definition 23. If: 
V lh (r h G ^ $ h G 1 ) 

then we can have in P a big-step of Synchronized Logic Programming: 

[r h Gj % t 

for every p such that xp is a fresh variable unless possibly when x e TAA(x) = (e, (}). 
In that case we may have xp = x. Furthermore 9 p is associated to T h G $ h G' 
and T = [<f> h G'Jp. Finally, used productions translate into the clauses used in the 
big-step and are applied to the edges that translate into the predicates rewritten 
by them. 

Proof 

The proof is by rule induction. 
See Appendix A. 
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Theorem 5 (Completeness) 

Let V be a set of productions of a HSHR system. Let P be the logic program 
obtained by translating the productions in V according to Definition 23. If we have 
in P a big-step of logic programming: 

[r h gj A t 

A 7T 

then there exist p, 0' , A, ir, $ and G such that 9 = 6 is associated to T h G — ^— > 
$ h G'. Furthermore T = [$ h G> and "P Ih (r h G $ h G'). 

Proo/ 

See Appendix A. 
Example 8 

We continue here Example 5 by showing how that fusion computation can be trans- 
lated into a Synchronized Logic Programming computation. 

(uxyzw)(Q(x, y, z)\uxy.R(u, x)\uzw.S(z, wj) — > 

(uxy)(Q(x, y, z)\R(u, x)\S(z, w)){x/z, y/w} 

Remember that a translation of the starting process is: 

u,x,y,w, z,xi,yi, zi,u 1 ,x 2 ,y2,U2,X3,u 3 , z 2 ,wi, z 3 ,w 2 \~ 

LQ( Xl , X2 , X3 )(x 1 ,y 1 ,z 1 )\L— X2X3M(x4tX5) {u 1 ,x 2 ,y2 1 u 2 , x 3 )\ 

^ J XlX 2X 3 .S( X 4, X 5) 

(u 3 ,z 2 ,w 1 ,z 3 ,w 2 )\m4(u,u 1 ,u 2 ,u 3 )\m 4 (x,x 1 ,x 2 ,x 3 )\ 
m 3 (y,yi,y 2 )\m,4(z,zi,Z2, z 3 )\m 3 (w,wi,w 2 )\n(u)\n(x)\n(y)\n(w)\n(z) 

We have the following productions: 

2/1,3/2,3/3,2/4,3/5 r L— X2X3 . R(xi . X5) (jj l ,y 2 ,y 3l y i ,y b ) > 

2/1,2/2,2/3,2/4,2/5 I- ifl(xi,x 2 )(2/4, 2/5)1^(2/1) 

2/1,2/2,2/3,2/4,2/5 I- ^xix 2 X3.S(x4,x 5 )(2/l,2/2,2/3,2/4,2/5) > 

2/1,2/2,2/3,2/4,2/5 I- is(xi,x 2 )(2/4, 2/5)|n(2/i) 
that corresponds to the clauses (we directly write suitably renamed variants): 

i^x 2 x 3 .i?(x4,x 5 )( ^2K,4,2/2),4,2/2, u 2,4) <- £iJ(xi,X2)( U 2,4)l n K) 

L XlX2X3 .s(x 4 , X5 ){in 2 (u 3 ,z 2 ,w 1 ),z 2 ,w 1 ,z 3 ,w 2 ) ^ L S ( XuX2) (z 3 ,w 2 )\n{u 3 j 
plus the clause obtained from the auxiliary production: 

m 4 (u" , out 2 (u? , x 2 ,y 2 ),u 2 , in 2 (u 3 , z 2 , w" ) ) <- 

m 4 (u", u'{, u' 2 \ u'l), m 2 (x' 2 i, z%),m 2 (y%, w'{) 

We obtain the big-step represented in Figure 8. The observable substitution of the 
big-step is {out 2 (u[, x 2l y 2 )/ui,in 2 (u 3l z 2 , Wi)/u 3 }. This is associated to the wanted 
HSHR transition with p = {u[/ui, u' 3 '/u 3 } and by applying p to the final graph of 
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Fig. 8. Big-step for a Fusion transition 

Lq( x1 ,x 2 ,x 3 )(xi, Vl, Zl), LxY X2X3 . R( Xi ,x 5 ) {ui,X2,y2,U2,Xz), 

Lx 1 x 2 x 3 .S(x4,x 5 )(U3, Z 2 ,Wl, Z 3 ,W 2 ), 

m 4 (w, ui,U2,u 3 ),m4(x,xi,X2,x 3 ),m3(y,yi,y2),m4(z, zi,Z2,z 3 ),m 3 (w, wi,w 2 ), 
n(u),n(x),n(y),n(w),n(z) 

o-ut2(u' 1 ,X2,y2)/ui,X2/x' 2 ,y2/y' 2 ,-U2/u 2 ,x 3 /x 3 

Q{x\ ,X2,X 3 

)(xi,yi,zi),L R{ 

X\ ,X2) 

(u2,x 3 ),n(u'i),L (u 3 ,Z2,Wl,Z 3 ,W2), 
m 4 (w, out 2 (wi , x 2 , y 2 ) , u 2 , u 3 ) , m 4 (x, xi , x 2 , x 3 ) , m 3 (y, yi , y 2 ) , 
7714(2, zi, Z2, z 3 ),m 3 (w, w 1 ,w 2 ),n(u),n(x),n(y),n(w),n(z) 

u I u" I u'l ,X2 1 x 2 ,V2 / y'2 , u 2 / u 2 > in 2( u 3 > 2 2 > w l)/ u 3 

LQ(x 1 ,x2,x 3 )(xi,yi,z 1 ),L R(xiiX2) (u 2 ,x 3 ),n(u' 1 ), 
L xi x 2 x 3 .s(x 4 ,x s )(in 2 (u 3 ,z 2 ,w"),z 2 ,wi,z 3 ,w 2 ), 
m 4 (u, u[ , u 2 , u 3 ) , m 2 (x 2 , z 2 ) , m 2 (y 2 , w") , m 4 (x, xi , x 2 , x 3 ) , m 3 (y , yx , y 2 ) , 
m 4 (z, zi , 22 , 23) , m 3 (w, uii , w 2 ) , n(u) , n(x) , n(y) , n(w) , n(z) 

u 3 I u ' 3 i z 1 1 z 2 > w l- / w l > z 2 / z 2 ! > w l f w l ' i z 3 1 z ' 3 > w 2 1 ^2' 

LQ( xl ,x 2 ,x 3 )(xi,yi, zi), L R ( xl:X2 )(u2,x 3 ),n(u[), L S ( xl:X2 )(z 3 , w 2 ),n(u 3 ), 
m4(u,u' 1 ,u 2 ,u 3 ),m 2 (x 2 ,z 2 ),m 2 (y 2 ,w 1 ),m4(x,x 1 ,x 2 ,x 3 ),m 3 (y,yi,y 2 ), 

m 4 (z, zi,z 2 , z 3 ),m 3 (w, wi , w 2 ),n(u), n(x) , n(y) , n(w) , n(z) 

the HSHR transition we obtain: 

l^Q(xi ,x 2 ,x 3 ) 

(x 1 ,y 1 ,z 1 )\L R{ 

xi ,x 2 ) 

(u 2 ,x 3 )\n(u' 1 )\L s ^ XuX2 )(z 3 ,w 2 )\n(u^)\ 
m 4 (u,u[,U2,u'^\m4{x,x 1 ,X2,x 3 )\m 3 (y,y 1 ,y2)\m4(z,z 1 ,Z2,z 3 )\m 3 (w,w 1 ,w 2 )\ 

m 2 (x 2 , z 2 ) \m 2 (j/2 , w-i) \n(u) \n(x) \n(y) \n(w) \n(z) 

that, translated, becomes the final goal of the big-step as required. 

We end this section with a simple schema on the correspondence between the 
two models. 



HSHR |SLP I HSHR | SLP 

Graph Goal Transition Big-step 

Edge Atomic goal Node Variable 

Parallel comp. And comp. Nil □ 

Production Clause Action Function s. 



Essentially the correspondence is given by the homomorphism between graphs 
and goals, with edges mapped to atomic goals, nodes to variables, parallel com- 
position to And composition and nil to □. Dynamically, HSHR transitions are 



28 



Ivan Lanese and Ugo Montanari 



modelled by big-steps, that are transactional applications of clauses which model 
productions. Finally, HSHR actions are modelled by function symbols. 

4-3 Using Prolog to implement Fusion Calculus 

The theorems seen in the previous sections can be used for implementation pur- 
poses. As far as Synchronized Logic Programming is concerned, in Lanese (2002) a 
simple meta-interpreter is presented. 

The idea is to use Prolog ability of dynamically changing the clause database 
to insert into it a set of clauses and a goal and to compute the possible synchro- 
nized computations of given length. This can be directly used to simulate HSHR 
transitions. In order to simulate Fusion Calculus processes we have to implement 
amoeboids using a bounded number of different connectors (note that m 2 , to 3 and 
n are enough) and to implement in the meta-interpreter the condition under which 
productions can be applied in a single big-step. This can be easily done. Further- 
more this decreases the possible choices of applicable productions and thus improves 
the efficiency w.r.t. the general case. 

5 Conclusion 

In this paper we have analyzed the relationships between three different formalisms, 
namely Fusion Calculus, HSHR and logic programming. 

The correspondence between HSHR and the chosen transactional version of logic 
programming, SLP, is complete and quite natural. Thus we can consider HSHR as 
a "subcalculus" of (synchronized) logic programming. 

The mapping between Fusion Calculus and HSHR is instead more involved be- 
cause it has to deal with many important differences: 

• process calculi features vs graph transformation features; 

• interleaving models vs concurrent models; 

• Milner synchronization vs Hoare synchronization. 

Hoare synchronization was necessary since our aim was to eventually map Fusion 
Calculus to logic programming. If the aim is just to compare Fusion Calculus and 
SHR it is possible to use SHR with Milner synchronization, achieving a much sim- 
pler and complete mapping, which considers the LTS of Fusion Calculus instead of 
reductions (see Lanese and Montanari 2004a). 

We think that the present work can suggest several interesting lines of devel- 
opment, dictated by the comparison of the three formalisms studied in the paper. 
First, our implementation of routers in terms of amoeboids is rather general and ab- 
stract, and shows that Fusion Calculus names are a rather high level concept. They 
abstract out the behaviour of an underlying network of connections which must 
be open and reconfigurable. Had we chosen 7r-calculus instead (see a translation of 
7r-calculus to Milner SHR in (Hirsch and Montanari 2001)), we would have noticed 
important differences. For instance, fusions are also considered in the semantics 
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of open 7r-calculus by Davide Sangiorgi (Sangiorgi 1993), but in that work not all 
the names can be fused: newly extruded names cannot be merged with previously 
generated names. This is essential for specifying nonces and session keys for secure 
protocols. Instead, Fusion Calculus does not provide equivalent constructs. Look- 
ing at our translation, we can conclude that logic programming does not offer this 
feature, either. Thus logic programming is a suitable counterpart of Fusion Calcu- 
lus, but it should be properly extended for matching open 7r-calculus and security 
applications. 

In a similar line of thought, we observe that we have a scope restriction operator in 
the Fusion Calculus, but no restriction is found in our version of HSHR. We think 
this omission simplifies our development, since no restriction exists in ordinary 
logic programming, either. However versions of SHR with restriction have been 
considered (Hirsch and Montanari 2001; Ferrari et al. 2001; Lanese 2002). Also 
(synchronized) logic programming can be smoothly extended with a restriction 
operator (Lanese 2002). More importantly, Fusion Calculus is equipped with an 
observational abstract semantics based on (hyper) bisimulation. We did not consider 
a similar concept for SHR or logic programming, since we considered it outside the 
scope of the paper. Furthermore our operational correspondence between HSHR 
and SLP is very strong and it should respect any reasonable abstract semantics. 
The mapping from Fusion Calculus into HSHR deals only with closed terms, thus 
no observations can be considered. However a bisimulation semantics of SHR has 
been considered in (Konig and Montanari 2001), and an observational semantics of 
logic programming is discussed in (Bruni et al. 2001). 

Another comment concerns concurrency. To prove the equivalence of Fusion Cal- 
culus and of its translation into HSHR we had to restrict the possible computations 
of the latter. On the contrary, if all computations were allowed, the same transla- 
tion would yield a concurrent semantics of Fusion Calculus, that we think is worth 
studying. For instance in the presence of concurrent computations not all equiva- 
lent amocboids would have the same behaviour, since some of them would allow for 
more parallelism than others. 

Finally we would like to emphasize some practical implication of our work. In fact, 
logic programming is not only a model of computation, but also a well developed 
programming paradigm. Following the lines of our translation, implementations 
of languages based on Fusion Calculus and HSHR could be designed, allowing to 
exploit existing ideas, algorithms and tools developed for logic programming. 
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Appendix A Proofs 

We have here the proofs that are missing in the main part and some lemmas used 
in these proofs. Lemmas are just before the proofs that use them. 

Proof of Lemma 2 

Notice that all the auxiliary productions perform two non trivial actions, and be- 
cause of Hoare synchronization and because each node is shared by at most two 
edges, synchronizing edges form chains. There are two alternatives: each chain ei- 
ther starts and begins on an external node, or it is a cycle that contains only internal 
nodes. Exactly one chain must be of the first type. In fact if we have no chain of 
that kind we have only trivial actions on nodes in S. Also, if we have more than 
one, we have more than two non trivial actions on nodes in S. Thanks to the last 
condition of Definition 17 this chain contains an odd number of connectors, which 
must be m connectors. One can easily check by induction on the (odd) length of the 
chain that the transition creates an amoeboid M(yi[i], y2[i]) for each component of 
vectors y\ and yi of fresh names and that these vectors are exposed on the external 
nodes together with an in n and an out n action, where n = \yx\ = \y 2 \. 

Let us now consider the other kind of chains: these chains produce rings of m-i 
edges connected only to fresh nodes, which thus correspond to isolate subgraphs. 
Furthermore, they affect only the labels of internal nodes as required. □ 

Lemma 3 

Given a set of amoeboids for a and a substitutive effect 9 of a fusion <j> — {xi = 
yi\i = 1 . . .n} then [er]| | n M(xi 1 yi) is a set of amoeboids for a9. 

Proof 

Since we are working up to injective renamings we only have to prove that two 
names are connected by [cr]| | n M(xi 1 yi) iff they are merged by a9 and that 
all the paths connecting external nodes in the final graph have odd length. By 
definition two names are connected by \a\ iff they are merged by a. Assume that 
two names x and y are merged by a9. Then their images along a are merged by 6. 
This means that we have in a chain of equalities from xa to ya. Thus we have 
amoeboids connecting the amoeboids of xa and of ya, thus x and y are connected. 
Assume now that x and y are connected. Then there exists an amoeboid connecting 
the amoeboids for xa and for ya. Thus 9 merges xa and ya as required. Finally 
note that all the paths between external nodes are created by connecting existing 
paths via new amoeboids. In particular, each new path is composed by n old paths 
and n — 1 new amoeboids. Thus its length is the sum of 2n — 1 odd lengths and 
thus it is odd. □ 

Proof of Theorem 1 

The proof is by rule induction on the reduction semantics. 
Let us consider the reduction rule: 

(z)(R\(- ■ ■ + ux.P)\(uy.Q + ...))-» {z){R\P\Q)a 
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where |x| = \y\ and a is a substitutive effect of {x = y} such that dom(er) C z. 

In order for that process to be in the standard form we just need to make R 
sequential by unfolding recursion and taking bound names to the outside if required. 
For simplicity, we show just the case where R is already sequential, the other being 
essentially equal. 

Let P\ be (• • • + ux.P) and Q\ be iuy.Q + ...). 

The translation of the LHS has the form: 

T h L^Lp^L^miOW \ xe ,n{x) 

where R' = R'p R ,, P{ = P[p P[ , Q[ = Q' iPq[ and R'6 = R, P{6 = P u Q[0 = Q x . 
We also use (u[x' .P')6 = ux.P and (u^y 1 .Q')0 = uy.Q. 
We have for Lp, and Lq, the two following productions: 

(u'jjin^/ 1 ,x') _ 

pi h Lp^pi) ■ >p!,x ,v P h lP}v p ,w P \[ xer »n(x) 

?i h l q[ ' 9i, V , vq \- IQJvq,wq I l^gr- "(a;) 

The choice of the parameters vp and vq is not important since they are fresh 
names and we work up to injective renamings. The choice of wp and wq is important 
instead, since they have to correspond to the nodes in the LHS that are still used 
by the process. The choice performed in Definition 15 ensures that. 

Note that [0J contains an amoeboid for a set U with u[,u' 2 G U. Thus from 
Lemma 2 the two above productions can synchronize via the amoeboid. Using rule 
(idle) for the other edges, we obtain as a result: 

r,r Jnt h L k ,(r)\lPhr,w P \ L er » n(x)\lQh Q ,* Q \ L er „ n(x)\m\ \ xe ,n(x)\ 

^M{x>\i\m)\\Mm 

Note that the fusion 7r of the transition is the identity since each synchronization 
involves two edges, and at least one of them is an amoeboid which exposes fresh 
names. Furthermore amoeboids expose each fresh name twice. Thus no names in V 
are merged. 

Also, in the final graph each node is shared by two edges. In fact, the only con- 
nections whose cardinality is not preserved by productions are the ones between 
nodes whose references are exposed, namely x' and y 1 , and the corresponding pro- 
cess edges, but these nodes are connected to the new M amoeboids created by the 
auxiliary productions. 

In particular, \ xeT ,^n(x)\ \ xeT ^n(x)\{6\ is an amoeboid for 0| fn (K'|p'|Q')- Fur- 
thermore thanks to Lemma 3 by adding in parallel \ i _ 1 M{x'[i],y'[i\) we obtain 
an amoeboid for 0\f n (pnpnQi\<j. 

Thus we can rewrite the final graph up to pseudoamoeboids as: 

r,r Jnt h L k ,(mPh P ,w P \lQh Q ^ Q m fnmP/m al\ \ xeV n(x) 
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The RHS of the fusion rule is (z)(R\P\Q)a, which has to be normalized into 
(zvpVq)(R\P\Q)6\o- with (vp)P = P and (vq)Q = Q- Furthermore we can choose 
the names (since we are reasoning up to injective renamings) in such a way that Q\ = 
0\{ n (R'\P'\Q') (plus an injective renaming on names in v p and vq which corresponds 
to an equivalence on the resulting amoeboids). 

Thus the translation of the RHS is equivalent to: 

r,r Jnt , h Ln,mPh P ,* P \lQh Q ,* Q \lOivl\ \ xev Mx) 

The correctness of the rule follows. 
Let us consider now rule: 

(z)(R\(--- + <f>.P))^(z)(R\P)a 

where a is a substitutive effect of <\> such that dom(cr) C z. 

We use essentially the same technique as before. Let us suppose R already se- 
quential. Let P\ be • • • + (j>.P. The translation of the LHS has the form: 

r \-L k , (rO|L # ,(ft)| Ml \ x€0 n{x) 

where R' = R'p R >, P{ = P[p P[ and R'6 = R, P{6 = Pi. We also use (<p'.P')6 = <j).P. 
We have for Lp^ the following production: 

Pi I- Lp^p-i) ^pi,v P h [PjiTp^plHI \ xer „n(x) 

For vp and vlp the considerations for the preceding rule are still valid. 
Using rule (idle) for the other edges, we obtain as a result: 

T,T Int ^L k ,{r)\lPy p ^ P \M\ \ x& ,,n{x)\\e\\ \ xe ,n{x) 

Note that the fusion part of the transition label is an identity since we have only 
trivial synchronizations. 

Also, in the final graph each node is shared by two edges since the production 
preserves the cardinality of connected edges for each node. 

In particular, J^p// n(x)|[0]] is an amoeboid for ^|f n (_R'|p')- Furthermore, note 
that \a\ has the form J n rri2(xi,yi) and thus thanks to Lemma 3 by adding it 
in parallel we obtain an amoeboid for #|f n (.R'|p')<7. 

Thus we can rewrite the final graph as: 

r,r 7nt h L kl (r)\lP} Sp rf p \l6\ {n ( R ,\p,)cr]\ \ x£iJ n(x) 

The RHS of the fusion rule is (z)(R\P)a, which has to be normalized into 
(zvp)(R\P)9\o- with (vp)P = P. Furthermore we can choose the names (since 
we are reasoning up to injective renamings) in such a way that 6\ = #|f n (ij'|p') 
(plus an injective renaming on names in vp which corresponds to an equivalence 
on the resulting amoeboids). 

Thus the translation of the RHS is equivalent to: 
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r,r Int , h L Rl (f)\lPh P ,^\M\ L e0 n(x) 

The correctness of the rule follows. 
Consider now the rule: 

P = P',P' -^Q',Q' = Q 
P^Q 

Equivalent agents are converted into the same representative (up to a-conversion) 
before being translated, thus the translation of P and P 1 are equal up to injective 
renamings. Similarly for the translation of Q and Q', thus the thesis follows. □ 

Lemma 4 

Let Ox and 9 2 be idempotent substitutions. Let eqn(#i) = {x = y\x/y E 6\). Then 
mgu(eqn(#i) U eqn(0 2 )) = &i mgu(eqn(# 2 )#i)- 

Proof 

See Palamidessi (1990). □ 
Lemma 5 

Given a graph P h G and one or zero productions for each edge in G let: 
r h G $i h G[ 

r h g $ 2 h G' 2 

be two transitions obtained by applying the chosen production for each edge (and 
using the (idle) rule if no production is chosen). Then there exists an injective 
renaming a such that: 

• k\{x) = a(A 2 (x)) if x is not an isolated node; 

• 7ri = fT7r 2 ; 

• $i = cr(3> 2 ); 

• G'l = o{G' 2 ). 

Proof 

The proof is a simple rule induction if one proves that derivations can be done in a 
standard way, namely by applying to the axioms first rules (par), then rule (merge) 
and finally rules (new). This can be proved by showing that one can exchange 
the order of rules and that one can substitute two applications of (merge) with 
substitutions a and a' with just one application with substitution a' a . We have 
many cases to consider, but they are not so interesting. As examples we will show 
the detailed proof for commutation of rule (merge) and (par) and for composition 
of two different rules (merge) . 

Let us consider the first case. Suppose we have a part of a derivation of the form: 

r h d ^ $ h g 2 

Ta h Gia $i h G 2 ap V h G[ & h G' 2 

Fa, r h Gitr|Gi AlUAVlU "') $i, $' h G 2 ap\G' 2 (Al) 
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where for readability we have not written explicitly the side conditions (see Def- 
inition 10). Then we must also have a derivation for the same transition obtained 
applying rule (par) first and then rule (merge): 

r h Gi ^ $ h g 2 r h G[ $' h G' 2 
r,r hGi|Gi AuA '' vUv ' i §,&\-G 2 \G' 2 

(T,I> h (GilG^a h (G 2 |G 2 )ap' (A2) 

We have to prove that this derivation is allowed and that the resulting transition is 
the one derived also by derivation Al. The first step is allowed iff (ru$)n(r'U$') = 
0. Since the first derivation is allowed by hypothesis, then (Tcr U <I>i) n (r' U $') = 0. 
Thus the only problem is when a name which is after renamed (by a or p) creates 
a conflict. In that case thanks to Lemma 1 we can suppose to start with a different 
name. The final result of the derivation is not changed by that since the name 
disappears. Thus the first step is legal. 

For the second step we need \/x,y G T,T'.xa = ya A x ^ y actAuA'(^) = 
act AU A' (y)- Note that since (r U $) n (V U$') = and a : T -> T, we have that a is 
the identity on T', thus the only x, y such that xa — ya A x ^ y arc in T, thus the 
condition is satisfied since it was satisfied in derivation Al. Furthermore we have 

(r,r> = r<7,r' and {G^G'^a = Gio-ig;. 

We must now consider p' . We have: 

p' = mgu({(n AU A'(a;))cr = (n AU A' (y))a\xa = ya}U{xcr = ya\x(irUTr') = 2/(7rU7r')}) 

For what already said we have p' = mgu({(nA (x))o~ = (nA(y))cr|a;c7 = ya}[j{x<7 = 
ya\xir = yir} U {xa = ya\xir' = yn'}) = pit' where p is the one used in derivation 
Al. 

In particular, K"(x) = \\{x) if x G Ta and K"(x) = k'(x)ir' = A!(x) since n' is 
the identity on representatives (sec Definition 8). Thus A" = Ai U A'. Furthermore 
tt" = p'\r*x> =7riU7r'. 

Also, $" = $1,$' since it is determined by the first part of transition. Finally 
(G 2 \G' 2 )ap' = G 2 ap'\G' 2 ap' = G 2 ap\G' 2 n' = G 2 ap\G' 2 . This proves that case. 

We will now consider the composition of two (merge) rules, with substitutions a 
and a' respectively. Suppose we have a derivation of the form: 

Ta h da h G 2 ap 

Yaa' h daa' $" h G 2 apa'p' (A3) 

We want to be able to derive the same transition using just one inference step, 
with substitution a a' . We have: 



Yaa 1 h Gxaa' $i h G 2 aa' Pl 



(A4) 
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First of all we have to prove that the step is allowed. The required condition is 
that Vx,y G T.xaa' = yaa' A x ^ y => act A (x) — act\(y). We have two cases. 
If xa — ya then the thesis follows from the analogous condition of the first step 
of derivation A3. Otherwise we can rewrite the condition as Va;,y G T.xaa' = 
ycrcr 1 A xa ^ ya =>• act a (a;) = actA(y). Note that &ct A >(xa) = act a (a;) thus we can 
rewrite the condition as \/x',y' G Ta.x'a' = y'a' A x' ^ y' => actA'( x ') = actA'(y') 
what is the condition for the second step of derivation A3. 

The main step now is to prove that aa' pi = a pa' p' . We have: 
p = mgu({(n A (x))(7 = (n A (y))a\xa = ya} U {xa = ya\xir = yir}) 
p' = mgu({(n A '(x))cr' = (n A ,(y))a'\xa' = ya'} U {xa' = ya'\xir' = yir'}) 
pi = mgu({(iiA(x))aa' = (n A (y))aa'\xaa' = yaa'} U {xaa' — yaa'\xir = yir}) 
In particular we have: 

/ i 
aa pi = 

= aa' mgu({(n A (x))aa' — (n A (y))aa'\xaa' = yaa' Ax ^ y}U 

U {xaa' = yaa'\xTT = yir}) = 
= a mgn({(n A (x))a = (n A (y))a\xaa' = yaa' A x ± y}(J 

U {xa — ya\xir — yir} U eqn(cr')) = 
= cr mgu({(n A (x))cr = (n A (y))a\xa — ya Ax ^ y}U 

U{(nA(a;))CT = (n A (y))a\xaa' = yaa' Axa ^ ya}U{xa = ya\xir = y7r}Ueqn(cr')) = 

= a mgu(eqn(p) U {(n A (x))a = (n A (y))a\xaa' = yaa' A xa ^ ya} U eqn(cr')) = 

= cr/?mgu({(nA(a;))o'/3 = (n A (y))ap\xaa' = yaa' A xa ^ ya} U eqn(cr')p) = 

= (T/9mgu({nA' (xa) = n A >(ya)\xaa' = yaa' A xa ^ ya} U eqn(cr') U eqn(p)) = 

= a pa' mgu({(n A > (xa))a' = (n A >(ya))a'\xaa' = yaa' Axa ^ ya} U eqn(p)a') = 
= apa'mgu({(n A ,(x'))a' = (n A ,(y'))a'\x'a' = y'a' Ax' ^ y'}U 

U eqn(7r')cr' U cqn(p \ n')a') = 
= apa'mgu({(n A/ (x'))a' = (n A ,(y'))a'\x'a' = y'a' Ax' ^ y'}U 

U {xa' = ya'\xir' = yir'} U eqn(p \ n')a') = 

= apa'p' mgu(eqn(p \ ir')a' p') = 

= apa'p' 

We add some explanations for that (long) sequence of equations. Step 1 is just 
the definition of p\. Step 2 is allowed by Lemma 4. Step 3 is a simple mathematical 
transformation. Step 4 applies the definition of p. Step 5 is Lemma 4 again. Step 
6 creates a new p on the outside using idempotence, then it brings it inside using 
Lemma 4 and uses idempotence again to delete it where it is not necessary. It 
uses the definition of A' too. Step 7 is Lemma 4 again. Steps 8 and 9 are trivial 
mathematics. Step 10 is another application of Lemma 4. Finally, step 11 is justified 
since the names in the domain of p\ n' are neither in the domain of a' (since 
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otherwise they would be in n') nor in the domain of p' (since p' is computed 
after having applied p, which is idcmpotent). Thus an allowed mgu is a subset of 
(p \ n')a'p' which can be deleted by idempotence. □ 

Proof of Theorem 2 

Let us first consider the case of two productions for communication actions. 

In order to apply them we need two sequential process edges to be rewritten. 
Each production needs to be synchronized with at least another one since each 
node is shared by exactly two edges. Since process edges are connected only through 
amoeboids we can have a synchronization only if the two actions done by process 
edges are equal to two actions allowed by amoeboids. Thanks to Lemma 2, they 
must be two complementary actions, i.e. an in n and an out n . Furthermore they have 
to be done on the same amoeboid, that is on two names merged by the substitution 
a corresponding to the amoeboids. 

Thus P can be decomposed in the form (x)P'a where P' = P[\P2\Q' with P[ 
and P2 sequential processes which are translated into the rewritten edges. 

We must have P[ = ■ ■ ■ + uix'.P" and P'^ = u^y' .P^ + . . . (or swapped) with 
\x'\ = \y'\. Furthermore a merges u\ and 112 thus we have a transition P — > P' that 
corresponds to the synchronized execution of the two prefixes. 

The productions to be applied are thus forced except for the ones inside the 
amoeboids, but the only difference among the choices (as shown by Lemma 2) 
amounts to pseudoamoeboids and exchanges between equivalent amoeboids in the 
result. From Lemma 5 we know that the result of a transition is determined up to 
injective renamings (and actions on isolated nodes) by the starting graph and the 
productions chosen. Thus the transition that corresponds to P — > P' for Theorem 
1 is equal up to injective renamings to a transition that differs from [P]^ — ^ 
r' h G only for pseudoamoeboids and substitutions of equivalent amoeboids. The 
thesis follows. 

The other case is analogous. □ 

Lemma 6 

Let A\, . . . , A n be a goal. 

We want to build a big-step where the clause unified with Ai is Hi <— Bi, if 
any (some Ai may not be replaced, in that case as notation we use Bi = Ai). As 
a notational convention we use a^i, . . . , a;, >ni to denote the arguments of Ai and 
aij(x'i j,Vi j) to denote the jth argument of Hi if it is a complex term and x\ j if it 
is a variable (note that we have different names for the same variable, one for each 
occurrence). All these are undefined if A t is not replaced, djj and y^j are undefined 
also if the jth argument of Hi is a variable. 

Let 9 r be the mgu of the following set of equations: 

{x' itj = x' p q , tfij = p'pjxij = x p . q } U {xij = x' i :j \the jth argument of H, is x' t J } 
We will denote x9 r with [x] . 

We will have a big-step of the form A\, . . . , A n G\, . . . , G n iff 
Mi,p e {!,.. . , nj.Vj G {!,. .. ,ni}.Vg G {1, . . . , n p }.x^j = x VA => a j; j = a p , q . 
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Furthermore we have: 

= { a i,j([ x 'i,j]> [y'i,j])/ x ij\ a i,j is defined} U{[v k ]/v k \ (v k = x' id Vv k = V(t>k = 

A dij is undefined )) A [v k ] ^ v k } 
G\, . . . , G n = (B\, . . . , B n )9. r 
where [y{ ][l] = [yQl]}. 

The big-step is determined (up to injective renamings) by the choice of the clauses 
and of the atoms they are applied to. 

Proof 

We will prove a more general result by induction on the number of "considered" 
atoms, that is we consider an increasing chain of derivations, and considered atoms 
are the ones that, if expanded in the complete derivation, have already been ex- 
panded. For simplicity, atoms are considered in numeric order, i.e. at step m atoms 
A\, . . . , A m ^i have already been considered, and atom A m becomes considered. 

8 * 

We will prove that a computation of the form A\, . . . , A n — > G\, . . . , G n where 
we substitute only atoms in the starting goal and where the atoms generated by 
considered atoms do not contain function symbols exists iff: 

Vz,p G {1, . . . ,m}.Vj G {1, . . . ,ni}.\fq G {1, . . .,n p }.Xi^ = x VA => a itj = a VA and 
that furthermore: 

• 9 = {aijdx'ijY, [y'ij]')/ x i,j\ a i,j is defined A i < m} U {[v k ]' /v k \(v k = x' hj V v k = 
Vi,j[l] V (v k = x it j A a itj is undefined )) A [v k ]' ^ v k }; 

• G\, . . . , G n = (£?!, . . . , B m )0' r , (A m+ i, . . . , A n )9; 

where 9' r is the mgu of the subset of eqn(0) containing only equalities between 
variables occurring in considered atoms and where [x]' = x9' r . 

Note that if all the atoms are considered we obtain the thesis. 

Base case, m = 1) We have the following transition: 

A 1 ,...,A n {B 1 ,A 2 ,...,A n )9 1 

where 9\ is an mgu of {A\ = Hi}. This transition exists iff 6\ exists. 
We have: 

9\ = mgu({xi jJ - = aij(x' 1 j, y\j)\ai,j is defined} U {xij — x^^aij is undefined}). 
Note that if x\ t j = xi A =f> a\_j = ai j9 then the mgu does not exist (if aij and ai >q 
are both defined, otherwise they have to be both undefined since if just one of them 
is defined then a function symbol will remain in the considered part against the 
hypothesis). 

If the condition is satisfied we have: 

9i = mgu({xij = ai t j(x[j,y[j)\aij is defined}U 
U {a^ q {x' l q ,^ l q ) = ai,j{xi t j,y\j)\x\,j = xi, q } U {x ld = x^Jcuj is undefined}) = 
= mgu({iij = ai,j(x'ij,y[j)\a\j is defined}U 
u Wi,q = x 'i,vVi,q = Vi,j\ x i,j = x i,q) u = x 'i,jW,j is undefined}) 

Note that the last part is exactly eqn(^), thus 9' r is its mgu. 
Thus we have: 

9i = mgu({x ld = a 1 j(x' l j ,y\ j )\a 1 ^ is defined} U {[v k ]' = v k \[v k ]' ^ v k }). 
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To have the real mgu we just need to apply 8' r to the equations in the first part 
(note that x\j is unified with some other variable only if a\j is undefined thus the 
domain variables of the first part are not changed). 

This proves the first part since this mgu exists and the second one since it has the 
wanted form. 

The third part follows from the observation that 0i| n (s 1 ) = ^rln(Bi)- 

Inductive case, m => m + 1) Assume that A\, . . . , A n -A G\, . . . , G n is a logic 
computation where we substitute only atoms in the starting goal, where atoms 
A\, . . . , A m+ i are considered and where the atoms generated by them do not contain 
function symbols. 

Let us take the subcomputation where only the first m atoms have been consid- 
ered. 

By inductive hypothesis we have that this part of the computation exists iff: 
yi,p e {1, . . . , m}.Vj e {1, . . . , nJ.Vg £ {1, . . . ,n p }.Xij = x p , q => a;j = a Pi9 
and that: 

• 8 = {aij([x' itj ], [y'ij])/xi,j\ai,j is defined A i < m} U {[v k ]/v k \(v k = x' hj V v k = 
Vijil] V (vk = Xij A dij is undefined )) A [v k ] ^ v k }; 

• Gi, . . . , G n = (Si, . . . , B m )8 r , (A m+ i, . . . , A n )6. 

We will now consider the atom A m +\. If it is not substituted then the thesis follows 
trivially (note that A m+ i docs not contain variables substituted with a complex 
term by 8, since this can happen only if we have Xij = x m+ i_ q with i < m + 1, 
Xij defined and x m+1 , q undefined, and this is forbidden; thus we have A m+ i8 = 
A m+ i8 r ). Let us consider the case in which it is substituted. 

We will have a small step of the form: 
(Gi, . . . , G mi A m +i, . . . , A n )8 > ( Gi, . . . , G m +i, A m +2, ■ ■ ■ , 

A n )88' 

where 8' = mga({A m+ i6 = H m+ i}) (note that we can assume that 8 is also applied 
to G m+ \ since we can assume dom(#) n n(G m+ i) = 0). 
We have: 

& = mgu({A m+1 8 = H m+1 }) = 

= mgu({x m+1J 8 = am+ij^'n+ij^n+ijOlam+ij is dcfined}U 

U {x m+1 j8 = x' m+1 Ja m+1 .j is undefined}) 

For each binding we must consider two cases: either the variable x m +ij appears in 
already considered atoms (we call it an old variable) or it does not (we call it a new 
variable). In the second case 8 is the identity on that variable. In the first case if 
a m +i,j is defined then the mgu exists iff we have a m +i,j = a p , 9 where a p>g is the 
function symbol in the binding for x m +i t j in 8. Note that if a Pi9 is undefined then 
also a m +i t j must be undefined otherwise the function symbol remains in the final 
goal. 
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Thus we will have: 

0' = mgu{{A m+1 9 = H m+1 }) = 

= mgu({a Ptq ([x' p J, [y' pq ]) = a m+1 j(x' m+ll ,g m+lj )\a m+hl is defined A 
A x PA = x m+ i tj A x m+ ij is old} U {[x m+1 .j] = x' m+1J \a m+lj is undefined}U 
U {x m +i,j = a m+ i,j(x' m+1 j,y' m+1 j)\a m +i,j is defined Ax k +ij is new} = 
= mgu({[x^] = x' m+lj , [y' pq ] = y^+ijlam+ij is defined A 
A x VA = i m+ i i3 A x m+ i,j is old} U {[a; m+ i,j] = x' m+l j \a m+ \ t j is undefined}U 
U {x m +i,j = a m +i,j{x' m+ i^,y' m+ i^)\a m+1 ^ is defined A x m+ ij is new} 

where we use [— ] to denote the representative of the equivalence class according to 
9. We can reorder this substitution into: 

mgu{{x m+ i.j = a m+ \j(x' m+1 j,y' m+ ^ :j )\a m+ ij is defined A x m+ ij is ncw}U 

U {[x' Piq \ = x' m+lj , [y' pq ] = ^ +1J |a fe+1J is defined A 
A x p . q = x m+1 .j A x m+1 j is old} U {[x m+ ij] = x' m+l j \a m+1J is undefined} 

Note that the second part is a renaming that does not involve variables in the 
domain of the first part. Thus we can define new equivalence classes [— ]' according 
to this substitution 9' r and put the substitution in the resolved form: 

mgu({s m+ ij = a m+1 j([x' m+1J }' , W m+ i tj \')\a m +\,j is defined t\x m+hj is new}U 

U {[v k ]' = v k \[v k }' ^ v k }) 

Thus the mgu exists and the first part of the thesis is proved. 

Let us consider the substitution 6 g = 69' . Note that the renaming part of 9' sub- 
stitutes variables according to the equivalence between variables in the H m+ i and 
representatives of the corresponding variables in A m+1 thus the composed substi- 
tution 9" maps each variable to the representative of the equivalence class that is 
defined by the union of the two sets of equations as required. Furthermore bindings 
with complex terms (the first part of the substitution) have disjoint domains and 
thus the union of them is made. Bindings coming from 9' have already the wanted 
representatives in the image, while to bindings in 9 the renaming is applied, map- 
ping variables into the representatives of their equivalence classes. Thus 9 g has the 
wanted form w.r.t. the equivalence classes determined by all the equivalences on 
variables. 

We have: 

(Gi, . . . , G m+ i,A m+ 2, . . . , A n )9 g = (Gi, . . . , G m+ i)6>", (A m+2 , . . . , A n )9 g 
as required since (dom(0 9 ) \ dom(0")) n n(Gi, . . . , G m+ i) = 0. 

Note that this result does not depend on the order of application of clauses 
and that after having chosen which clauses to apply and to which atoms it is 
deterministic up to an injective renaming (which depends on the choice of names 
for new variables and on the choice of representatives for the equivalence classes). 

□ 
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Proof of Theorem 4 

The proof is by rule induction. 

Axioms) 

Assume we have a production: 
xi,...,x n \- s{x\, . . . ,x n ) — ^ $ h G 
where: 

A(xi) = (di,yi) V« E {1 . . .n] 

and 7r : {x\, . . . ,x n } — > {a;i, . . . , x n } is an idempotent substitution. 

Then we have in P a clause: 
s{ax{xi-K, yi), . . . ,a„(x„7r,y„)) <- [$ h G] 
where we have Xi-n instead of ai(xiir,yi) if dj = e. 

We can have an applicable variant of this clause for each injective renaming p 
that maps each variable to a fresh one. Let us consider the goal: 

ls(X!, . . .,X n )j = S(X!, ...,X n ) 

It unifies with the clause variant: 
s{ai{xiir,yi), . . . ,a n (x n n,y n ))p <- [$ h G]/9 
with mgu # p : 

P = {ai{x l irp,yip)/x i \a l ^ e} U {2^7173/2:4 |ai = e}. 

Note that 9 P = p \ n < s ( Xl x n ))- We can see that 9 P is associated to xi, . . . ,x n h 

s(x\, . . . , x n ) $ h G as required. Observe also that the result of the computa- 
tion is: 

T = 1$ h G]^ p = [$ h G]p 

because n(Gp) (~l dom(6 p ) = 0. This proves the thesis. To deal with the missing 
possibilities for p w.r.t. the theorem statement note that bindings in the last part 
of 9 p can also be resolved also as Xi/xiirp. In that case we have no binding for Xi in 
9 p . This is equivalent to defining Xip — x^, and this covers the missing cases for p. 

Note finally that we used as clause the translation of the production and that we 
applied it to the translation of the rewritten edge. 

Rule (par)) 

rhG!^$hG 2 r h g; $' h g 2 (ru$)n (r u *') = 
r,r'hGi|Gi AuA '' 7rU7r '> h g 2 ]g 2 

By inductive hypothesis we have: 
. [T h GJ ^ T 

where 6> p is associated to V h Gi — ^ $ h G2 and T = [$ h G2]p; 

• [r h G'j °4 v 

where (9 p , is associated to F h G[ $' h G 2 and T" = 1$' h Gyp'. 

In both cases by inductive hypothesis we used as clauses the translations of the 
productions used in the proof of the HSHR transition applied to the translations 
of the edges on which the productions were applied. 

Thanks to Lemma 1 we can assume that the sets of variables used in the two 
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computations are disjoint. Thanks to Lemma 6 we know that these big-steps exist 
iff Xij — Xp. q => aij = a PtQ . Since the used variable sets are disjoint the same 
condition guarantees the existence of a big-step of the form: 

[r,r hGi|G'j T,r 

where we used as clauses the unions of the clauses used in the two smaller compu- 
tations, applied to the same predicates. 
We have that p 8' p , is associated to: 

r,r hGi|Gi AuA, '" U7r ') hG 2 |G 2 . 
We also have p 6' p , = (96') pp i and thus: 

T,T = [$ h G 2 ]p, 1$' h Gyp' = [$,$' h G 2 |Gypp' as required. 
Rule (merge)) 

T h Gi $ h G 2 Va;, y G r.xcr = ya A x y actA(x) = actA(y) 
Tcr h Gict $' h Gacr/Jg 

where a : F — > T is an idempotent substitution and: 

(i) . p g = mgu({(n A (x))a = (n A (y))a\xa = ya} U {xa = y<r\xn = yir}) where p g 

maps names to representatives in To whenever possible 

(ii) . Vz e TA'(za) = (A(z))a Pg 
(hi), tt' = p g \ra 

where we used p g instead of p to avoid confusion with the injectivc renaming p. For 
inductive hypothesis we have: 
[T h Gx] % T 

A 7T 

where # p is associated to T h Gi — ^— > <f> h G 2 and T = [$ h G 2 ]p and we used as 
clauses the translations of the productions used in the proof of the HSHR transition 
applied to the translations of the edges on which the productions were applied. 
Thanks to Lemma 6 we have that this computation exists iff: 

and that: 

• 9 r = mgu({^ J = x'^fftj = ffpjxij = x p . q }U 
{xij = x' i: j\the jth argument of Hi is x\ ■}) 

• 9 = {aijdx'ij}, [y'ij])/xi,j\aij is defined} U {[v k ]/v k \(v k = x' itj V v k = y^ ^l] V (v k = 
Xij A a,ij is undefined )) A [v k ] ^ v k } 

• T = (Bi, . . . , B n )6 r 

where [r h G\\ = A\,...,A n and we used the naming conventions defined in 
Lemma 6. In particular p maps each variable to its primed version. 

We have: 
[F h dja = [IV h Gkt] 

We want to find a big-step that uses the same clauses of the previous one applied 
to the same atoms, but starting from this new goal. We will use an overline to 
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denote the components of the new big-step. Thanks to Lemma 6 such a big-step 
exists iff: 

X i>3^ — x p,q^ — ®PiQ 

but if Xij = Xp_ q this has already been proved, otherwise this is guaranteed by the 
applicability conditions of the rule. 

We have to prove that 9-p- is associated to: 

To- h da $' h G 2 ap g . 

From Lemma 6 we have: 

Op = {aijiWiJ', \v[,j\') I x i,3 a \ a i,3 is defined} U {[v k ]' /v k \(v k = x[ 3 V» t = $^[1] V 
(v k = Xij A aij is undefined )) A [v k ]' ^ Vk} 

where [— ]' maps each variable to the representative of the equivalence class given 
by: 

c I / ^1 1| 

\ X i,j — X p,qlVi,j ~ Vp^qV^i,]^ — Xp t qO~ \U 

U {xijcr = rr-jlthe jth argument of Hi is x^j} 

Note that Xi^a is never unified with a primed variable unless a^j is undefined. 

Since A'(xija) = (A(xi.j))ap g we need to prove that 6 r = 9 r p~ 1 <jp g p 1 that is 
that [a;']' = [y'}' iff xap g — yap g . 

From the hypothesis and from Lemma 4 we have that ap g = mgu({nA(a;) = 
n h{y)\xcr = ya}U{x = y\xir = yir} Ueqn(cr)). The first and the third part are equal 
(adding primes) to the equations for [— ]'. As far as the second part is concerned, 
p maps variables merged by tt to the same primed variable, thus these equations 
become trivial. 

This proves that 9-p is associated to Ta h G\o — $' h G2crp g as required. 

By hypothesis and using Lemma 6 we have: 
[*r-G 2 ]p=(Bi,...,B n )0 r 
The result of the new computation is: 
(Bi, . . . , B n )9 r 

Thanks to the properties of p we have: 

{B u . . . , B n )T r = (B u . . . , B n )e r p- x op g -p = [$ h G 2 \pp- x ap-p = [*' h G 2 ap g p. 
Rule (idle)) 

The proof is analogous to the proof for axioms, using as clause corresponding to 
the production the translation of the (idle) rule. 
Rule (new)) 

rhGi^$hG 2 x£T ^n(ru$u{x}) = 

r.shGi Au{(lA8 """^ 'hG 2 

For inductive hypothesis we have in P the following big-step of Synchronized Logic 
Programming: 

[r h Gi] -V t 

where 9 p is associated to: 

rhGi^$hG 2 
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and T = [$ h G2I/5 but because a; ^ n(Gi) we have that 9 P is also associated to: 

1 , x \- Gi ► <P h G2 

The thesis follows. □ 

Proof of Theorem 5 

The translation [r h G] can be written in the form Ai, . . . , A„ where the AjS are 
translations of single edges. We want to associate a HSHR production to each Aj. 
For edges associated to atoms that are rewritten in [r h G] T we use an instance 
of the axiom that corresponds to the clause used to rewrite it, otherwise the rule 
obtained from rule (idle) applied to that edge and to nodes that are all distinct. 

Let Ti, . . . , T n be the heads of these rules. We choose the names in the following 
way: for each first occurrence of a variable in A\ , . . . , A n we use the same name for 
the node in the corresponding position, we use new names for all other occurrences. 
Note that there exists a substitution a such that (Ti, . . . , T n )a = A\,...,A n and 
that a is idcmpotcnt. Note also that for each i all names in Ti are distinct. 

For each i we can choose an instance Ri of the associated rule with head Tj such 
that for each i, j, i ^ j we have n(Ri) n n{Rj) — 0- As notation we use: 

Ri = T l hG l $i h G[ 

Since all the rules have a disjoint set of names we can apply n — 1 times rule (par) 
in order to have: 

U<r, 1-1,0, U ' A " U '" U^L^ 

Now we want to apply rule (merge) with substitution a. We can do it since a is 
idcmpotent. We have to verify that xa = ya A x 7^ y => ([J i A,)(x) = (a,v) A 
(Ui Ai)(x) = (a,w). This happens thanks to Lemma 6. Thus we obtain a rule of 
the form: 

n(A u . . . ,A n ) \- A 1 ,. . . ,A n ^ ^ ^ G' 

Thanks to Theorem 4 we can have in P the following big-step of Synchronized Logic 
Programming: 

[n(A 1 ,...,A n )\-A u ...,A n \^T 

for every p that satisfies the freshness conditions. Furthermore 6' is associated to 

n(Ai, . . . , An) hA 1 ,...,4^$hG'andT'=[$h G'jp. Finally we used as 
clauses the translations of the productions used in the proof of the HSHR rewriting. 
Note that [n(Ai, . . . , A n ) h A\, . . . , A n \ = [r h G]. Since the result of a big-step is 
determined up to injective renaming by the starting goal and the used clauses (see 
Lemma 6) then we must have 9 = 0' p' and T = T'p' for some injective renaming 
p' . Note that pp' satisfies the freshness conditions (since variables generated in logic 
programming are always fresh) and we also have 9 = 9" , . 

Thus we have that 9 is associated to T h G $ h G' and that T = T'p = [$ h 
G'Jpp'. This proves the thesis. □ 



